Re:Running the Let's Encrypt Beta
by dfox on Tuesday October 27, 2015 @09:40AM
(#10457887)
And another small note in regards to CSR: typical CA today uses the CSR only to get public key you want to have signed and replaces everything else with whatever they deem correct.
[ Parent
| on HN ]
Re:Running the Let's Encrypt Beta
by scintill76 on Tuesday October 27, 2015 @07:38PM
(#10461970)
Did a CA once accidentally sign a raw CSR that requested to itself become a CA? It seems like I remember something like this, but I couldn't find evidence. Anyway, that's one reason for the CA to be very careful what values it pulls out of the CSR.