News for hackers. Stuff that matters.
Re:ACME v2 and Wildcard Certificate Support is Live by floatboth on Tuesday March 13, 2018 @02:42PM (#16578623)
> someone can buy a domain like... googIe.com, get an SSL cert for it, and it's "valid"

Are you sure that all "old school" CAs wouldn't issue a cert for that?

They were never supposed to fight phishing. Domain Validation certificates literally validate… domains, and nothing more.

It would make more sense to prevent googIe.com from existing at the .com registry level, before any TLS is involved.

There are no comments on this comment yet.