Re:Google and HTTP
by thristian on Sunday February 25, 2018 @09:30PM
(#16462611)
> If anyone can get a certificate for the domains I own, it can't stop man in the middle attacks.
You're right, if that were the case, it would be terrible!
Luckily, it's not: to get a certificate for your domain, I need to either control your domain, or control the computer that the domain points at. In either case, you have much bigger problems than certificate issuance.
You're right, if that were the case, it would be terrible!
Luckily, it's not: to get a certificate for your domain, I need to either control your domain, or control the computer that the domain points at. In either case, you have much bigger problems than certificate issuance.