Hacker News new | past | comments | ask | show | jobs | submit login

If the top level is the same you can use a wildcard (*.example.com) cert.



You're missing the use-case where you want to use a wildcard certificate and an EV certificate. You can't get an EV wildcard certificate.


> You're missing the use-case where you want to use a wildcard certificate and an EV certificate. You can't get an EV wildcard certificate.

Yes that's not possible as EV certs are not issue for wildcards.

My counter is that EV certs are for chumps and the entire concept is a scamola. The only justification I'd accept for getting one is proper A/B testing that an EV cert lead to increased revenue. There's no inherent security argument for them.


EV certs don't stop domain hijacking + cheapo SSL cert attack vector?




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: