Dispelling the New SSL Myth
Claiming SSL is not computationally expensive is like saying gas is not expensive when you don’t have to drive to work every day.
My car is eight years old this year. It has less than 30,000...
Published Jan 31, 2011
Version 1.0Lori_MacVittie
Employee
Joined October 17, 2006
Lori_MacVittie
Employee
Joined October 17, 2006
Pino_129850
Jul 09, 2013Nimbostratus
Wildcard certificates and subjectAltName are useful if all web sites on a particular IP address are operated by the same entity. But I thought it was a bad practice to share one certificate among multiple unrelated sites, such as hundreds of web sites operated by hundreds of customers of the shared web hosting provider that operates a given server. Go Daddy, for example, has been known to pack upwards of a thousand budget hosting customers onto one IP address and use name-based virtual hosting to distinguish them. And making a site IPv6-only won't work unless the vast majority of users can reach the IPv6 Internet. When will the majority of home users in North America and Western Europe have an IPv6 address?