• Rivalarrival
      link
      fedilink
      English
      arrow-up
      27
      ·
      2 days ago

      Dynamic generation. There is no certificate until user request.

      • groet@feddit.org
        link
        fedilink
        English
        arrow-up
        27
        arrow-down
        2
        ·
        2 days ago

        Perfect, let’s also bind the certificate to a user session that is derived from a user fingerprint. That way the CA can track users across all sites

        • stinky@redlemmy.com
          link
          fedilink
          English
          arrow-up
          11
          ·
          2 days ago

          I just want to serve https, not get someone’s dick permanently installed in my ass