Hacker News Reader

Comment by packetized | Hacker News Reader

They aren't generating certs on the fly for randomly named dynos:

  -bash-4.1$ curl -vkLs https://wind-river-5693.herokuapp.com 2>&1 | grep certificate
  * Server certificate: *.herokuapp.com
  * Server certificate: DigiCert SHA2 High Assurance Server CA
  * Server certificate: DigiCert High Assurance EV Root CA
  -bash-4.1$

View on HN

Foo! Okay, I thought they were doing LE certs for every dyno's name. One wildcard makes a lot more sense.

FTA:

  ACM handles all aspects of SSL/TLS certificates for _custom domains_;
  you no longer have to purchase certificates, or worry about their
  expiration or renewal.

Emphasis mine.

Reply on news.ycombinator.com