News for hackers. Stuff that matters.

A comment on Should you use Let's Encrypt for internal hostnames?.

Re:Should you use Let's Encrypt for internal hostnames? by toddnni on Wednesday January 05, 2022 @04:03PM (#29814904)
Maybe a dump question, but was it so, that it is not only Let's Encrypt that uses Certificate Transparency Log, but all the other providers too?

If so, then the decision is more like, whether to use a public or private certificate for an internal service.

[ Parent | on HN ]
Re:Should you use Let's Encrypt for internal hostnames? by mac-chaffee on Wednesday January 05, 2022 @10:56PM (#29819179)
Yep, we recently moved from DigiCert to LE and someone was alarmed at the certificate transparency logs, until we scrolled down the page to reveal the same logs from DigiCert.

Wildcards hide it somewhat, but DigiCert charges per subdomain now, and every user thinks they need their own subdomain for some reason. So LE it is.

[ Parent | on HN ]