Let's Encrypt Stats

Re:Let's Encrypt Stats by toyg on Saturday December 05, 2015 @07:53AM (#10681747)

I know wildcards are useful and all, but they enable bad practices and increase risk. Now that LE makes it easy to mass-request certificates, excuses for using a wildcard are wearing thin. I'd rather LE never allowed them.

[ Parent | on HN ]

Re:Let's Encrypt Stats by X-Istence on Saturday December 05, 2015 @12:01PM (#10682451)

Wildcards allow me to serve all of my sub-domains over the same HTTP2 connection rather than causing the client to reconnect/renegotiate TLS/SSL.

This allows me to use domain sharding for those browsers still on HTTP 1.1, yet not have a performance penalty for doing so in the case of HTTP2.

[ Parent | on HN ]

Re:Let's Encrypt Stats by ajnin on Saturday December 05, 2015 @12:53PM (#10682640)

Let's Encrypt does not support wildcard certs but they do support SAN certs, so if your list of subdomains is fixed then you can still benefit from socket reuse with HTTP/2.

[ Parent | on HN ]