News for hackers. Stuff that matters.

A comment on Progress Towards 100% HTTPS, June 2016. Parent comment

Re:Progress Towards 100% HTTPS, June 2016 by 5ilv3r on Wednesday June 22, 2016 @03:41PM (#11956441)
IP addresses are not in certificates. Only hostnames. Not a rule, but I've set up hundreds and seen thousands, and never seen a single purchased cert that contained an IP.
[ Parent | on HN ]
Re:Progress Towards 100% HTTPS, June 2016 by Aaron1011 on Wednesday June 22, 2016 @04:29PM (#11956751)
That's because the certificate is used to determine if the IP address you're connecting to has control of the domain name you expected to visit.

Were the certificate to contain an IP address (or IP addresses), it would need to be updated every time the site started or stopped using a public-facing IP address.

[ Parent | on HN ]