Should a wildcard SSL certificate secure both the root domain as well as the sub-domains?

There’s some inconsistency between SSL implementations on how they match wildcards, however you’ll need the root as an alternate name for that to work with most clients. For a *.example.com cert, a.example.com should pass www.example.com should pass example.com should not pass a.b.example.com may pass depending on implementation (but probably not). Essentially, the standards say that … Read more

IPTABLES – Limit rate of a specific incoming IP

IPTables isn’t made for this kind of work, where lots and lots of packets need to be analyzed to make these decisions. IPTables is partly the answer though! The real answer to this is the awesome and underused traffic control facilities in Linux. Note that mucking around with this without knowing what is going on … Read more