Re:Progress Towards 100% HTTPS, June 2016
by simbalion on Wednesday June 22, 2016 @03:25PM
(#11956335)
This isn't about trusting you, it's about trusting that your domain belongs to the IP address it's supposed to.
[ Parent
| on HN ]
IP addresses are not in certificates. Only hostnames. Not a rule, but I've set up hundreds and seen thousands, and never seen a single purchased cert that contained an IP.
Re:Progress Towards 100% HTTPS, June 2016
by Aaron1011 on Wednesday June 22, 2016 @04:29PM
(#11956751)
That's because the certificate is used to determine if the IP address you're connecting to has control of the domain name you expected to visit.
Were the certificate to contain an IP address (or IP addresses), it would need to be updated every time the site started or stopped using a public-facing IP address.