Comment by bruce511
1 day ago
I'm not sure the alternative is sef-created RootCA. (But perhaps I don't understand the underlying case.)
To me, the alternative is just a LE cert. Can do wildcards via DNS challenge.
1 day ago
I'm not sure the alternative is sef-created RootCA. (But perhaps I don't understand the underlying case.)
To me, the alternative is just a LE cert. Can do wildcards via DNS challenge.
I was replying in the context of what you were replying to where they either could spend 30k or make a private root. I'm not sure they were actually using EV but for it to cost $30k and given the topic of the thread it seems plausible they were using some technicality on EV or similar to reduce public domain validation requirements.