News for hackers. Stuff that matters.

A comment on Running one’s own root Certificate Authority in 2023. Parent comment

Re:Running one’s own root Certificate Authority in 2023 by nickf on Sunday September 17, 2023 @07:43AM (#37543981)
A wildcard covers one single level of sub-domains. An NC'd CA can be used to issue for anything. Nameconstraints are 'enforced' on the client side and many don't support it. Running a public CA - even with a nameconstrained CA, is a challenge to do properly.
[ Parent | on HN ]
Re:Running one’s own root Certificate Authority in 2023 by vbezhenar on Sunday September 17, 2023 @07:57AM (#37544096)
One of the parents claims that everything supports name constraints now, so my suggestion was with this assumption in mind.
[ Parent | on HN ]