3 ms·
Agreed, as a rule of thumb. Yet when it's, say, a certificate for the HomeAssistant service at my personal residence, avoiding the subdomain being published to
by metadat 2y ago
Agreed, as a rule of thumb.
Yet when it's, say, a certificate for the HomeAssistant service at my personal residence, avoiding the subdomain being published to the transparency log is advantageous from a both a privacy and security perspective.
Naturally, best practices depend on the use-case and context.
- jsheard 2y agoIf you're relying entirely on LetsEncrypt for a service which uses hundreds or thousands of subdomains (e.g. one per user) then you practically have to use a wildcard too, because generating tons of individual certs for the same top level domain will very quickly run into LEs rate limits.
- BadBadJellyBean 2y agoYou can request a higher rate limit: https://isrg.formstack.com/forms/rate_limit_adjustment_request https://isrg.formstack.com/forms/rate_limit_adjustment_reque...