• Rivalarrival
    link
    fedilink
    English
    arrow-up
    27
    ·
    2 days ago

    Dynamic generation. There is no certificate until user request.

    • groet@feddit.org
      link
      fedilink
      English
      arrow-up
      27
      arrow-down
      2
      ·
      2 days ago

      Perfect, let’s also bind the certificate to a user session that is derived from a user fingerprint. That way the CA can track users across all sites

      • stinky@redlemmy.com
        link
        fedilink
        English
        arrow-up
        11
        ·
        2 days ago

        I just want to serve https, not get someone’s dick permanently installed in my ass