Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

> I don't know any case where someone has control over the root domain but is not eligible for a wildcard cert.

Companies very very often point their root domain at a hosting company for their marketing site; let's use Netlify as an example.

This does NOT mean that I would expect Netlify to be able to issue wildcard certs for my domain.

Basic "www-izer" (redirection) services are another example where the root domain is pointed somewhere that should not be able to issue wildcard certs.



To deal with this, a DNS entry "Root Domain Controls Wildcarts" could be required for the validation.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: