Are we allowed to have one person (@raza19) in this case, getting his identity verified by StartCom, and re-sell wildcard domain certificate to the rest of LET on domains that are not owned by him nor

(Quote)

this will be perfect and remove the need for a wildcard cert.

(Quote)

That's what I am trying to point out here. For that price you don't get "a certificate", you become verified, and then can issue an unlimited amount of wildcard certificates over dur

(Quote)

I know its for organization validation and once you are validated you get access to unlimited SAN wildcard certificate.

I am interested in wildcard SSL, but not sure if this one work out. May be we could just make a list of the offers currently going on, so that people can choose the cheap ones.

(Quote)

the certificate is valid for as many domains as you would like and comes with a wildcard for every domain.

) i'm very happy with the deal i got 9$ for 5years of wildcard cert

The point is that by using wildcard certificates, you reduce the security that you would like to convey through these certificates to the weakest of your services. "Once you fix the other pro

Why would you have a wildcard SSL certificate for a domain that's not being hosted on the mail server?

First, I was only giving an example. It could be ANY service that uses the wildcard certificate that is being attacked, and the successful escalation of one would lead to the leak of the key and would

If someone compromised your mail server they could just buy their own wildcard SSL certificate for your domain name and spoof your server (equivalent to taking the private key if you're using forward

Wildcard certificates can even be a security risk. If you use a single certificate for all your services running on *.yourdomain.com, then the compromise of a single key could lead to the compromise t

at the major resellers for the rest of us to get wildcard SSL's for nearly free. They're anything but a necessary product. They're just nice to have is all.

The cost of a Wildcard Domain Validation SSL in no way represents the true cost of production.

I pay $99 for a RapidSSL wildcard for one year. Don't think it's that expensive, but it's not cheap either.

I wouldn't say people who can't renew are screwed. The offer was too good. If you got a year wildcard at that price cool deal, you knew it was risky. Ipxcore seems to have a pretty good deal. Interest