Portal Home > Knowledgebase > Articles Database > Is secure to offer subdomains with signed SSL


Is secure to offer subdomains with signed SSL




Posted by UltraSeedbox, 08-21-2011, 09:04 AM
Hello, I have wildcard certificate for my domain, Since I sell VPS with free sub-domain of choice is it secure to offer same wildcard certificate for those sub-domains. Can customer simply use that wildcard certificate on their own and make damage with it ? Kind Regards.

Posted by andretenreiro, 08-21-2011, 01:19 PM
It depends on how secure you want your customers to be. Yes, in a nutshell I think it's secure, believing that your customers will not require a high reliable certificate. The problem with wildcard certificates is that if the certificate got compromised, this will affect all sub-domains. If they require extra security, I would recommend them to buy a single certificate with Extra Validation (EV), if require.

Posted by snapstart-chris, 08-21-2011, 02:03 PM
You really don't want to do this. All servers, or in this case VPS's, will need to have a copy of the private key. By sharing your private key with people that you don't know, you're giving out the ability to decrypt everybody's 'secure' traffic.

Posted by UltraSeedbox, 08-21-2011, 04:57 PM
Inerall-chris: thank you for this info, I will follow: better safe than sorry. Kind Regards.



Was this answer helpful?

Add to Favourites Add to Favourites    Print this Article Print this Article

Also Read


Language: