• Rivalarrival
      link
      fedilink
      English
      arrow-up
      27
      ·
      1 month ago

      Dynamic generation. There is no certificate until user request.

      • groet@feddit.org
        link
        fedilink
        English
        arrow-up
        27
        arrow-down
        2
        ·
        1 month ago

        Perfect, let’s also bind the certificate to a user session that is derived from a user fingerprint. That way the CA can track users across all sites

        • stinky@redlemmy.com
          link
          fedilink
          English
          arrow-up
          11
          ·
          1 month ago

          I just want to serve https, not get someone’s dick permanently installed in my ass