Portal Home > Knowledgebase > Articles Database > Is secure to offer subdomains with signed SSL
Is secure to offer subdomains with signed SSL
Posted by UltraSeedbox, 08-21-2011, 09:04 AM |
Hello,
I have wildcard certificate for my domain, Since I sell VPS with free sub-domain of choice is it secure to offer same wildcard certificate for those sub-domains.
Can customer simply use that wildcard certificate on their own and make damage with it ?
Kind Regards.
|
Posted by andretenreiro, 08-21-2011, 01:19 PM |
It depends on how secure you want your customers to be.
Yes, in a nutshell I think it's secure, believing that your customers will not require a high reliable certificate.
The problem with wildcard certificates is that if the certificate got compromised, this will affect all sub-domains.
If they require extra security, I would recommend them to buy a single certificate with Extra Validation (EV), if require.
|
Posted by snapstart-chris, 08-21-2011, 02:03 PM |
You really don't want to do this. All servers, or in this case VPS's, will need to have a copy of the private key. By sharing your private key with people that you don't know, you're giving out the ability to decrypt everybody's 'secure' traffic.
|
Posted by UltraSeedbox, 08-21-2011, 04:57 PM |
Inerall-chris: thank you for this info, I will follow: better safe than sorry.
Kind Regards.
|
Add to Favourites Print this Article
Also Read