3 ms·
public certificates? Do you use wildcards, or are you unconcerned by leaking information like servernames via CT?
by iso1631 6y ago
public certificates? Do you use wildcards, or are you unconcerned by leaking information like servernames via CT?
- dspillett 6y agoPublic wildcard cert for centrally managed things. Of course only a trusted few have access to the private parts of the certificate that covers centrally managed things. For local dev instances I suggest having a local only meaningless domain and a wildcard off that, If we were using per name certs and name leaking were a significant issue we could instead sign with a local CA and push the signing cert out as trusted to all machines we manage.