On: Bucket Stream: Finding S3 Buckets by watching certificate transparency logs

[cortesoft]

If you have a wildcard cert, you don't have to share the subdomains with the CA.

[noway421 → cortesoft]

More importantly: why s3 doesn't use wildcard ssl cert? I find it strange that they would queue DNS changes on a simple bucket provision.

[rocqua → noway421]

Because then amazon would have trivial access to all connections to s3 buckets.

[thanksgiving → cortesoft]

I think support for wildcards is coming next year (to let's encrypt)