Hacker News Reader

> One funny thing I've discovered as a result of certificate transparency logs is that the second your host gets given an SSL cert

I've been thinking of using wildcard certs for Caddy in regards to this.

and then what? serve your app under some obscure / customer unfriendly subdomain?

Even if you use a common subdomain, anecdotally I get orders of magnitude less bot traffic than not using a wildcard cert.