[8cvor6j844qw_d6]

> One funny thing I've discovered as a result of certificate transparency logs is that the second your host gets given an SSL cert

I've been thinking of using wildcard certs for Caddy in regards to this.

[jgalt212]

and then what? serve your app under some obscure / customer unfriendly subdomain?

[sadeshmukh]

Even if you use a common subdomain, anecdotally I get orders of magnitude less bot traffic than not using a wildcard cert.