News for hackers. Stuff that matters.

A comment on Ask HN: What's your solution for SSL on internal servers?. Parent comment

Re:Ask HN: What's your solution for SSL on internal servers? by perbu on Wednesday February 09, 2022 @08:42AM (#30272485)
Just beware that the records of the TLS certs are public. So you'll leak a some hostnames. This might or might not be ok.
[ Parent | on HN ]
Re:Ask HN: What's your solution for SSL on internal servers? by tmottabr on Wednesday February 09, 2022 @08:55AM (#30272624)
not if you use wildcard domain in the cert. LE already support wildcard certs
[ Parent | on HN ]
Re:Ask HN: What's your solution for SSL on internal servers? by tyingq on Wednesday February 09, 2022 @09:04AM (#30272716)
That's not really ideal either...one copy of the cert that isn't protected well becomes a master key of sorts for someone already inside your internal network.
[ Parent | on HN ]
Re:Ask HN: What's your solution for SSL on internal servers? by amalter on Wednesday February 09, 2022 @09:10AM (#30272772)
Often inside your network you are more concerned with encryption than authentication. If you "just" need encryption over the wire, wildcard cert's are useful.
[ Parent | on HN ]