undefined | Better HN

0 pointsmanigandham8y ago0 comments

What's unacceptable? There's nothing insecure about sharing a certificate among multiple hostnames.

Also you can get a dedicated certificate on the free plan for $5/month.

0 comments

3 comments · 1 top-level

bad_user8y ago· 2 in thread

$5/month is $60/year, which is ridiculous.

I maintain 5 websites hosted on 5 different domains (blog in English, blog in native language and 3 project websites). The cost of 5 certificates would be $300 per year, or $25 per month.

Right now I'm paying $0 for the certificates of those 5 domains, thanks to Lets Encrypt.

I've been hosting them myself on a Digital Ocean VPS, with really low maintenance, since the machine is updating itself and the websites get built and deployed via Travis. Now I'm moving them to GitHub Pages and my hosting cost will also be zero.

manigandhamOP8y ago

The certificates are already free, Cloudflare offered them long before LetsEncrypt. You seem to want a dedicated certificate which is what costs money, likely because of their scale and existing integrations. There is no improved security with a dedicated certificate.

You can also host on github pages while using Cloudflare for the custom domain, which is already the most common setup on github for several years now.

bad_user8y ago

If there's nothing wrong with those shared certificates, then CloudFlare wouldn't offer "custom certificates" as a $5/month upgrade.

> You can also host on github pages while using Cloudflare for the custom domain, which is already the most common setup on github for several years now.

Yes, because GitHub Pages was not offering HTTPS for custom domains. Now they do, so that need is gone.

1 more reply

j / k navigate · click thread line to collapse