# Getting an exception to the rate limit

**URL:** <https://community.letsencrypt.org/t/getting-an-exception-to-the-rate-limit/14198>\
**Category:** Feature Requests\
**Created:** [April 13, 2016, 1:22pm UTC](https://community.letsencrypt.org/t/getting-an-exception-to-the-rate-limit/14198 "2016-04-13T13:22:38Z")\
**Posts on this page:** 1\
**Showing post:** 25

<div class="post-metadata">

**Author:** ![greggman](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/greggman/32/233_2.png) [@greggman](https://community.letsencrypt.org/u/greggman)\
**Post date:** [April 18, 2016, 12:01pm UTC](https://community.letsencrypt.org/t/getting-an-exception-to-the-rate-limit/14198/25 "2016-04-18T12:01:52Z")

</div>

Thanks. Yea, I I’m curious about what kind of abuse. Since I’m only giving away sub domains and since they are relatively deep subdomains like `*.users.happyfuntimes.net` is there much value in abusing them? It’s not like you can steal cookies or anything else related to other subdomains. The fact that is a deeper subdomain seems like that makes it not all that desirable. There are a few DNS companies that offer free domains as like [freenom](http://www.freenom.com/). Also my DNS server will only points the domains to local IP addresses (like 192.168.0.12) which won’t really get you anywhere right? So is there any really abuse issue?

Speaking of which, somewhere in [this thread](https://community.letsencrypt.org/t/a-public-cert-for-localdev-letsencryrpt-org/13504) I suggested making a separate service with DNS and certs. The simplest idea is just use `<ipaddress>.freecerteddomains.org`. The only issue there is you’d be ending each person with the same ipaddress the same private cert which is supposedly against the rules. But if that was allowed that would also solve my issue as I could just use that. Could also make it `<ipaddress>.<randomid>.freecerteddomains.org` which is prety much the same as using [freenom](http://www.freenom.com/) + letsencrpt except

1. you wouldn’t have to sign up
2. you wouldn’t have to per-register an id. (as in choose a subdomain)
3. your machine wouldn’t need to be publically on the net get the cert

Actually I take that back. The second method doesn’t work because I need to point to internal IPs. Although I guess I could provide 2 subdomains `external.<ipaddress>.<randomid>.freecerteddomains.org` and `internal.<ipaddress>.<randomid>.freecerteddomains.org`

---

_[View the full topic](https://community.letsencrypt.org/t/getting-an-exception-to-the-rate-limit/14198)._