3 ms·
> There may even be legitimate use cases for lazily grabbing certs in the request path; Anything springs to mind? If you're using per-user sub-domains on your
by jopsen 5y ago
> There may even be legitimate use cases for lazily grabbing certs in the request path;
Anything springs to mind?
If you're using per-user sub-domains on your service, I'd imagine you'd be using wildcard certificates.
- dharmab 5y agoWhy use a wildcard? They're expensive and if compromised have a large blast radius.
- jchw 5y agoLE limits the number of subdomains you can request on a given domain, so it is probably somewhat necessary to use wildcard certs.
- jchw 5y agoHow about this: a service that runs on a customer’s own domain, under a subdomain. Think blogging, GitHub issues, some kinds of SaaS products. Seems like something not covered by wild cards that would not be thwarted by LE rate limits and probably is useful in practice.