Why a wildcard cert?

[funkymonkeymonk]

I love what you're doing here and have been playing around a bit with it myself as a side project. I didn't understand why for SSL you've chosen to use a wildcard cert when as far as I can tell this architecture does not use or need any subdomains? Wouldn't it be more secure and easier to get the cert just for the root domain?

I'm going to test it out myself to see if a non-wildcard cert works and I may answer my own question and I'll respond back here if I find anything or have a PR that may be useful.

[paulmarsicloud]

Hi @funkymonkeymonk !!

First off - my sincerest apologies for the delay in this reply!! I have had some crazy life changes as of recent and my beloved aws-url-shortener project has not been on the high list of priorities at this time!

I believe I choose a wildcard cert so that I could have SSL for both https://makeitshort.link/ and https://preview.makeitshort.link/ but I might take a look and see if there is indeed a better way to do this. I absolutely welcome any forking or PRs, please tag me and I will take a closer look!

Out of curiosity, how did you find this project? I haven't really advertised it yet so am genuinely curious 😄

[funkymonkeymonk]

A bunch of hunting on GitHub and reviewing architecture. It was one of those, I know it can be done this way, somebody must have done it, and finding yours. I was really impressed with the straight forward approach.

I've made some tweaks myself, specifically adding automatic QR code generation for my short links. At some.point in my laughably small amount of free time I'd like to add auth, link management, and manual link creation functions. If I do anything worth sharing have at it.