4 ms·
Regarding MerkleMap: Ouch! I never realized letsencrypt is leaking all of the sub domains i'm creating. :-/ I thought the names were giving me a bit of extra se
by vanviegen 2y ago
Regarding MerkleMap: Ouch! I never realized letsencrypt is leaking all of the sub domains i'm creating. :-/ I thought the names were giving me a bit of extra security through obscurity.
Why does it do that? I thought only revocations need to be published?
- jorams 2y agoIt does that because it's required to. The system is called Certificate Transparency[1] and browsers require certificates to be in CT logs to be accepted. If you want to hide what subdomains you have you can use a wildcard certificate, though it can be a bit harder to set up. [1]: https://developer.mozilla.org/en-US/docs/Web/Security/Certificate_Transparency https://developer.mozilla.org/en-US/docs/Web/Security/Certif...
- vanviegen 2y agoThanks for explaining!