News for hackers. Stuff that matters.

A comment on StartCom will log all issued SSL certificates to public CT log servers. Parent comment

Re:StartCom will log all issued SSL certificates to public C... by creshal on Wednesday March 23, 2016 @11:49AM (#11345502)
You're only ever allowed to use your account with the person you validated with. You cannot share an account, e.g. between employees of the same company; if you want to transfer an account to another person over your vacation, you have to create a new account, re-validate, and recreate all certificates on the new account.

Obviously, we said f*k that and just registered everything on the CEO's name and have him do the phone verification.

[ Parent | on HN ]
Re:StartCom will log all issued SSL certificates to public C... by BillinghamJ on Wednesday March 23, 2016 @12:04PM (#11345662)
Oh right, yeah. I'm pretty sure every company violates that particular rule :P
[ Parent | on HN ]
Re:StartCom will log all issued SSL certificates to public C... by chris_wot on Wednesday March 23, 2016 @01:47PM (#11346622)
Every company that does this loses all their auditing capabilities on the systems that use these accounts. Not good.
[ Parent | on HN ]