Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

SSL guide #97

Open
wants to merge 1 commit into
base: master
Choose a base branch
from
Open

SSL guide #97

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
25 changes: 25 additions & 0 deletions best_practices/SSL.md
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,25 @@
# SSL Certificates & Stuff

## Try Let's Encrypt for development purposes - and maybe even for production

We have "Let's Encrypt" as a blip in our tech radar. I'll be using it to secure
the icalialabs domains...

## Types of certificate by domain

### Single domain

### Multiple domain

### Wildcard domain

This is the one you might want for projects where we want flexibility over the
quantity of (sub)domains covered by the certificate without re-issuing the
certificate or running the certification process again.

Keep in mind, however, that the "Extended Validation (EV)" (a.k.a "The Green
Bar") won't be available in this kind of certificate. According to [Network Solutions](http://www.networksolutions.com/support/why-can-t-i-get-a-wildcard-extended-validation-ev-ssl-certificate/):

> In order to ensure that EV SSL Certificates are not issued fraudulently or misused after issuance, the regulatory body governing the issuance of EV SSL Certificates known as the CA/B Forum decided to require that issuing CA's validate the legitimacy of each and every Web address to which an EV SSL Certificate is assigned. Therefore, the issuance of "Wildcard" EV SSL Certificates for Web addresses such as "*.networksolutions.com" is not permitted. If you would like to purchase multiple EV SSL Certificates to replace your Organizationally Validated Wildcard SSL Certificate, contact Customer Support to inquire about our volume discounts.