Sslip.io: A Valid SSL Certificate for Every IP Address

Re:Sslip.io: A Valid SSL Certificate for Every IP Address by viraptor on Tuesday September 08, 2015 @07:56AM (#10185147)

I was actually looking at the comodo website to figure out if I can submit revokation on my own (we've got the key after all...). Gave up after looking at 20+ pages. Apart from a login site for email cert revocation, I can't find any reasonable contact.

Comodo website is not that good apparently.

Edit: in the document posted by brohee: (about authentication for certs revocation) "OR the Subscriber must be able to send an S/MIME email signed with the private key associated with the Certificate". That's doable :)

[ Parent | on HN ]

Re:Sslip.io: A Valid SSL Certificate for Every IP Address by brohee on Tuesday September 08, 2015 @08:24AM (#10185239)

[email protected] it is

4.9.2 Who can Request Revocation A Subscriber or another appropriately authorized party can request revocation of a Certificate. An authorized party includes an RA, regardless of whether on behalf of the Subscriber may request revocation through their account. Other parties may report suspected Private Key Compromise, Certificate misuse, or other types of fraud, compromise, misuse, inappropriate conduct, or any other matter related to Certificates, in the first instance, by email to [email protected].

[ Parent | on HN ]