News for hackers. Stuff that matters.

A comment on StartCom will log all issued SSL certificates to public CT log servers. Parent comment

Re:StartCom will log all issued SSL certificates to public C... by technion on Wednesday March 23, 2016 @06:08PM (#11348662) 

     not any of our wildcard
But if you get a wildcard, it doesn't leak anything about the names or details of your internal servers.
[ Parent | on HN ]
Re:StartCom will log all issued SSL certificates to public C... by BillinghamJ on Thursday March 24, 2016 @02:47AM (#11351034)
Not really true. Wildcard certs only work for one level of labels. As such, we still have to include quite a large proportion of a set of our internal hostnames in the cert
[ Parent | on HN ]