Re: [Slightly OT] which wildcard cert to purchase

[Bernhard Froehlich]

dale gallagher schrieb:

Thanks for the responses and useful advice.

I do understand the security benefit of having a separate cert per physical host.

Imagine the case that one of your hosts gets compromized. If you are using wildcard certs then the bad guy can use the certificate to mimic each and every hostname in your domain. And also remember: the chances to compromize one of your hosts increases exponentially with the number of hosts.

[...]

Hope it helps.
Ted
;)

--
PGP Public Key Information
Download complete Key from http://www.convey.de/ted/tedkey_convey.asc
Key fingerprint = 31B0 E029 BCF9 6605 DAC1  B2E1 0CC8 70F4 7AFB 8D26

smime.p7s
Description: S/MIME Cryptographic Signature