https - Multi domain SSL? -
a co-worker told me when visit website on ssl certificate no longer guarantees you're dealing intended recipient. due called "multi-domain ssl certificates". quick google search seems show these exist - under impression ssl provided encryption and authentication. no longer case? surely step in wrong direction?
there wildcard certificates, allow hosts in 1 domain covered same cert. they're more expensive issued (since cas wouldn't make money if you'd ordered multiple separate single-domain certs), when need cover multiple hostnames in domain ssl, can quite savings.
a issued cert cover @ least 1 host name, www.example.com. , wildcarding, can cover *.example.com.
ssl guarantees nothing in way of identification - link encrypted. certificate - self-signed ones. "commercial" certs (theoretically) trustworthy third party saying "we've verified person www.example.com certificate issused www.example.com"
Comments
Post a Comment