3 ms·
It has a broken certificate for the www subdomain. It's now 2023 and certificates are still a pain in the butt. The web needs a better solution than Let's Enc
by TekMol 3y ago
It has a broken certificate for the www subdomain.
It's now 2023 and certificates are still a pain in the butt.
The web needs a better solution than Let's Encrypt.
We need a certificate authority to which you can prove control over a domain by putting a file in:
domain.com/.well-known/root_ownership
And get a wildcard cert this way.
Let's Encrypt's approach to require changing DNS entries for this is not the way to go.
Their argument seems to be that user generated content might end up in a file. And therefore file authentification is only good for individual hostnames. But which website let's you put user generated content into /.well-kown/ on the root domain?
- raxxorraxor 3y agoLet's encrypt is fine and a step into the correct direction. You would have the exact same problem with every classical CA, you just have to put the correct URLs into the subject alternative name. A convention browsers adopted for different reasons, which now leads to a less intuitive situation. The "identity" market with their dubious ideas would currently ensure that we end up with a worse solution than we have now. Wildcard certs for every subdomain can be a bad idea if we look at the numerous cloud services that provide subdomains to their clients.