[Ajedi32]

That was only necessary because, at the time, there was no other way to get a large number of wildcard certs issued for their domain in an automated fashion.

With ACME that will no longer be the case. Let's Encrypt will allow you to do basically the same thing for free with ~20 devices a week[1] starting on February 27[2], for example. In the future, commercial CAs may choose to offer similar services with more relaxed rate limits.

[1]: https://letsencrypt.org/docs/rate-limits/

[2]: https://letsencrypt.org/2017/07/06/wildcard-certificates-com...

[tokenizerrr]

Yeah, would be nice if ACME with DNS validation was widespread. But right now it's still not viable due to Let's Encrypt's rate limits.

[pfg]

It's fairly trivial to request a rate limit adjustment from Let's Encrypt[1].

[1]: https://docs.google.com/forms/d/e/1FAIpQLSetFLqcyPrnnrom2Kw8...