Re:Sslip.io: A Valid SSL Certificate for Every IP Address
by yrro on Tuesday September 08, 2015 @07:54AM
(#10185136)
Hm, how is that compatible with Startcom's policy of charging for revocation?
[ Parent
| on HN ]
Re:Sslip.io: A Valid SSL Certificate for Every IP Address
by nailer on Tuesday September 08, 2015 @08:22AM
(#10185230)
Mozilla should probably add 'charging for revocation' to their list of problematic practices (required to be included in Firefox). Not that revocating compromised certificates isn't already required, but just that some behavior by poor CAs needs to be explicitly pointed out: https://wiki.mozilla.org/CA:Problematic_Practices
Re:Sslip.io: A Valid SSL Certificate for Every IP Address
by brohee on Tuesday September 08, 2015 @08:33AM
(#10185277)
What? Revoking expired certificate is not required, and would be a completely useless thing to do, bloating CRLs for no gain whatsoever.
Re:Sslip.io: A Valid SSL Certificate for Every IP Address
by nailer on Tuesday September 08, 2015 @09:10AM
(#10185429)
Sorry, my bad. I wrote 'revoking expired certificates' rather than 'revoking compromised certificates'. Now fixed.
Re:Sslip.io: A Valid SSL Certificate for Every IP Address
by 0x0 on Tuesday September 08, 2015 @08:03AM
(#10185161)
Good question. Maybe you can skip the fee by posting your private key to pastebin and send them the link? :P Might not leave you with an account in good standing with them though ;)
Re:Sslip.io: A Valid SSL Certificate for Every IP Address
by TheLoneWolfling on Tuesday September 08, 2015 @08:52AM
(#10185359)
That has been tried before: https://web.archive.org/web/20140412085458/https://revokame....
Re:Sslip.io: A Valid SSL Certificate for Every IP Address
by drdaeman on Tuesday September 08, 2015 @09:46AM
(#10185606)
Hah. So sslip.io should went with Startcom instead of Comodo.
Re:Sslip.io: A Valid SSL Certificate for Every IP Address
by TheLoneWolfling on Tuesday September 08, 2015 @08:49AM
(#10185343)
It isn't.