John McAfee’s BlackCert launches with unlimited use SSL certificates from $29

Re:John McAfee’s BlackCert launches with unlimited use SSL c... by ddddddddq on Tuesday August 18, 2015 @11:34AM (#10079739)

I just want some CA to offer cheap/affordable name constrained CA certs for domains I own. If I own `foo.com`, I should be able to get a cert that can sign certs for `foo.com,*.foo.com`.

Yes, yes, DANE, but it's not ubiquitous or even all that widely accepted.

[ Parent | on HN ]

Re:John McAfee’s BlackCert launches with unlimited use SSL c... by michaelbuckbee on Tuesday August 18, 2015 @12:04PM (#10079931)

What aspects of a plain wildcard cert wouldn't work for that?

[ Parent | on HN ]

Re:John McAfee’s BlackCert launches with unlimited use SSL c... by duskwuff on Tuesday August 18, 2015 @12:37PM (#10080194)

"Affordable". Most CAs charge exorbitant prices for wildcard certificates; 10x the price of a normal cert isn't unusual.

[ Parent | on HN ]

Re:John McAfee’s BlackCert launches with unlimited use SSL c... by ddddddddq on Wednesday August 19, 2015 @11:21AM (#10086067)

By deploying the same certificate/key to every machine you really cut down on the 'private' part of the private key.

[ Parent | on HN ]