News for hackers. Stuff that matters.

A comment on StartCom will log all issued SSL certificates to public CT log servers. Parent comment

Re:StartCom will log all issued SSL certificates to public C... by pfg on Wednesday March 23, 2016 @11:41AM (#11345438)
Sure, it's a vulnerability in the sense that they didn't want to allow WHOIS-based verification from their web frontend (for whatever reason. Maybe it wasn't even a conscious decision and they just forgot to include it during some rewrite.)

It's not a vulnerability in the sense that it's not allowed in their CPS or by CA/B.

[ Parent | on HN ]

There are no comments on this comment yet.