Care to elaborate?
Care to elaborate?
You've got a fighting chance in a corporate network where you can deploy and manage the Root CA via Active Directory/Group Policy, but managing it at home with consumer-grade devices... not gonna be a good day.
Maybe not the perfect solution for most users though.
Personally I've been running my own domain + wildcard for a few years, it'll be nice to remove the cost of the wildcard from the setup.
1. https://letsencrypt.org/2017/07/06/wildcard-certificates-com...
I'm assuming they're still going to need to get refreshed on a regular basis, but this is a great step in the right direction!
Easily solved with separate networks or vlans etc...
Are you saying that for the most trusted servers TLS is needed, but less trusted servers can be spoken to with less security?