Re:How a banner ad for H&R Block appeared on Apple.com witho...
by jes5199 on Monday April 08, 2013 @12:07PM
(#5512544)
multi-domain certs are brittle, because you have to keep them up to date with all the domains you're serving.
Re:How a banner ad for H&R Block appeared on Apple.com witho...
by onemorepassword on Monday April 08, 2013 @01:31PM
(#5513114)
That doesn't make them brittle, it does make updating them a potential single point of failure. But that goes for multiple things if you're working from one single IP address, so accounting for those is part of the tradeoff.
Also, I talked to GlobalSign recently, and they had a brand new solution that used SNI with an automatic fallback to multi-domain certificate for browsers that don't support SNI.