4 ms·
I don't understand the difference between wildcard certificate and intermediate certificate. Intermediate certificate is more secure because you can use differ
by vbezhenar 3y ago
I don't understand the difference between wildcard certificate and intermediate certificate.
Intermediate certificate is more secure because you can use different certificates for different subdomains, insead of sharing private key for wildcard certificate with every subdomain server.
Whether it hits CT or not - is not relevant at all. What matters is if intermediate certificate hits CT.
- nickf 3y agoA wildcard covers one single level of sub-domains. An NC'd CA can be used to issue for anything. Nameconstraints are 'enforced' on the client side and many don't support it. Running a public CA - even with a nameconstrained CA, is a challenge to do properly.
- vbezhenar 3y agoOne of the parents claims that everything supports name constraints now, so my suggestion was with this assumption in mind.