8 ms·
I made the switch just recently to making my perosnal site HTTPS only. It was surprisingly easy to do with nginx. StartSSL gives free 1 year certificates - alt
by lambada 14y ago
I made the switch just recently to making my perosnal site HTTPS only. It was surprisingly easy to do with nginx.
StartSSL gives free 1 year certificates - although each certificate is good for only one sub-domain and the root.
I do wish wildcard, and multi-domain certificates weren't so expensive though - it would give me so much more flexibility.
- gst 14y agoSSL/TLS Server Name Indication (http://en.wikipedia.org/wiki/Server_Name_Indication http://en.wikipedia.org/wiki/Server_Name_Indication) is supported by all major browsers nowadays. No need for a multi-domain certificate, just use an individual certificate for each virtual host.
- mike-cardwell 14y agoI think the problem is that startssl will only give you one certificate per domain. Ie, they wont give you multiple free certificates for different subdomains of the same domain. Also, as far as I understood it SNI doesn't (and never will) exist for Windows XP IE users, making it a non-starter for most websites for many years to come.
- huskyr 14y agoAccording to the Wikipedia article IE8 users on XP are left in the cold. It will work on IE7 and higher on Vista and higher though. It also won't work on Android 2.3, which still has around 50% market share [1]. [1]: http://developer.android.com/about/dashboards/index.html http://developer.android.com/about/dashboards/index.html
- spindritf 14y ago> startssl will only give you one certificate per domain. Ie, they wont give you multiple free certificates for different subdomains They will. You just need to create (and then renew) each separately.
- btgeekboy 14y agoI know for a fact they will give out separate certificates for individual subdomains; we do it regularly.
- mike-cardwell 14y agoFree ones?
- btgeekboy 14y agoYep. Remember, "www" is a subdomain just as much as "somethingelse" is.
- mike-cardwell 14y agoIf that's the case, I wonder why they only let you use one domain in the certs subjectAltName field. I have a cert from them with my domain (which we'll pretend is example.com) in the Common Name field, and "www.example.com" in the subjectAltName field. But I really want a second subjectAltName field in the same certificate for a legacy hostname. This, they don't offer.
- rauar 14y agoRequires dedicated IPs, one per domain. Otherwise the correct certificate cannot be resolved correctly.