10:46 <afuentes> I just bought a "dirty cheap" wildcard cert from ssl2buy ($42). Lets hope its not an scam site :>

11:37 <bignose> afuentes: I would expect SSL certs to plummet in price anyway, now that people can get them with little effort from Let's Encrypt

11:37 <bignose> the most I'd expect to pay is whatever someone charges to manage a Let's Encrypt cert for me.

11:37 <bignose> that should drive down hard the rent that other cert providers can charge.

11:46 <afuentes> bignose, yeah... I hope so too... they still charge big bucks for wildcards... They assume that those who need a wildcard cert can pay for it

11:47 <afuentes> Which is untrue for me... im right now paying more for the cert than for my vps... which is weird to say the least

11:48 <afuentes> and lets encrypt does not provide wildcert not now and quote "not likely in the future either"

11:48 <afuentes> :(

11:49 <afuentes> So far everything seems legit... im verifiying my domains now... :>

12:01 <TimMc> afuentes: It's not a scam site, although given what happened with StartSSL and Symantec my concern would be browsers distrusting a CA for operating sloppily. That *probably* doesn't correlate with cert price, though...

12:02 <TimMc> I'm probably going to buy a cert there too, FWIW (as soon as I pick a subdomain name) since wildcard cert prices might go *up* as LE continues to eat up the single-domain market.

12:16 <afuentes> TimMc, right :)

12:17 <afuentes> TimMc, FWIW, im having issues verifiying my domains... The meta tag is there but it says it cant find it. And I cant change back to verify by email :/

12:17 <afuentes> I will have to contact their support it seems

12:21 <afuentes> TimMc, okay, i figure it out myself :>

12:22 <afuentes> TimMc, they tell you to use a meta tag in your index.html... but you have actually use .well-known/pki-validation/gsdv.txt instead

12:22 <afuentes> as per https://support.globalsign.com/customer/portal/articles/1345666-performing-domain-verification---http-verification-method

12:22 <afuentes> that is kinda sloppy of them... although not security-wise so far u.u

13:21 <afuentes> The only way to set up ssl in sandstorm with a paid cert is to have a reverse proxy, right? as per https://docs.sandstorm.io/en/latest/administering/ssl/

13:22 <afuentes> I thought I was doing this only because of my setup

13:23 <afuentes> by the way, this "You can follow this guide that explains how to use a cron script to extract the certificates from your (sandcats.io enabled)" have some problems because domains are different when serving... Some apps give errors :)

13:24 <afuentes> In some client...

13:24 <afuentes> Thats the whole reason I finally bought the wildcert :>

13:25 <afuentes> (just saying because is on the official Documentation...)

14:14 <TimMc> afuentes: Do you have any other websites?

14:16 <TimMc> And, does anyone rely on the domain suffix at the moment? (That is, do you have the leisure to repoint the domain to a different server temporarily, verify there, and then point it back?)

14:20 <afuentes> TimMc, well, Just the instructions were sloppy. They said I have to use some meta tag in my index.html... and it wasnt working. Googling gave me the right path to put the verifiacion tag... also. I have a dedicated sandstorm subdomain. I was able to verify using the main domain, so no trouble there :)

14:21 <afuentes> Btw, fwiw it seems to work fine :)

14:22 <afuentes> im yet to verify it fixed the problems I was having mixing my domain and sandcats domain :>