Post #3237427
2026-06-09 15:42 UTC
@tom7@mastodon.social
At first I thought you were over-reacting a bit with this video (I know the over-reaction is the joke, but still), who doesn't love Let's Encrypt?
But certificates also have downsides. Creating a TLS certificate puts your domain on a public list (CT logs), which invites hackers and scrapers to your site.
So even if you claim a name like ae0t6vnr73j7tq1t1s.org, if you want to use it without having to ignore the browser warning, you will have to deal with those other visitors too.
Replies (1)
-
@jesse@chaos.social 2026-06-09 15:52
@tom7@mastodon.social I know that you could create a wildcard certificate, and then create randomised subdomains to get around this, but still. The average user that orders a new domain name, might think something like: "I've never told anyone about this domain name, I should be fine waiting to fully secure it, at least for a few days", and be fully pwned in the first few hours. So I guess I'm saying I agree, always security maxin’ is bad.