News for hackers. Stuff that matters.
Re:Another free CA as an alternative to Let's Encrypt by nrmitchi on Friday August 20, 2021 @09:55AM (#28245992)
> I don't know any case where someone has control over the root domain but is not eligible for a wildcard cert.

Companies very very often point their root domain at a hosting company for their marketing site; let's use Netlify as an example.

This does NOT mean that I would expect Netlify to be able to issue wildcard certs for my domain.

Basic "www-izer" (redirection) services are another example where the root domain is pointed somewhere that should not be able to issue wildcard certs.

Re:Another free CA as an alternative to Let's Encrypt by TekMol on Friday August 20, 2021 @12:58PM (#28248347)
To deal with this, a DNS entry "Root Domain Controls Wildcarts" could be required for the validation.