News for hackers. Stuff that matters.

A comment on Rate Limits.

Re:Rate Limits by Walkman on Wednesday August 17, 2016 @04:16PM (#12308062)
Is it possible to request random certificates for a competing company which you know uses Letsencrypt? If yes, you could force them to not use Letsecrypt because of these limits. What count as an issued certificate?
[ Parent | on HN ]
Re:Rate Limits by pfg on Wednesday August 17, 2016 @04:22PM (#12308118)
You would not be able to increase any of the relevant rate limit counters without at least controlling a (sub)domain belonging to your competitor, or being able to send requests from the IP address your competitor is using to request certificates. There's no rate limit that would apply to your competitor short of that.
[ Parent | on HN ]
Re:Rate Limits by imaginenore on Wednesday August 17, 2016 @04:24PM (#12308133)
How would you do that from the IP different from the one the domain points to?
[ Parent | on HN ]