News for hackers. Stuff that matters.

A comment on ACME v2 and Wildcard Certificate Support is Live. Parent comment

Re:ACME v2 and Wildcard Certificate Support is Live by vertex-four on Tuesday March 13, 2018 @05:10PM (#16579819)
It’s currently standard for CAs to host multiple verifiers in multiple jurisdictions, to reduce the chances of this happening, afaik.
[ Parent | on HN ]
Re:ACME v2 and Wildcard Certificate Support is Live by schoen on Tuesday March 13, 2018 @05:24PM (#16579961)
Let's Encrypt is developing this feature but it might be a little premature to call it "standard"—it's not specified in the Baseline Requirements and I'm not sure whether there's any CA that has announced it as a part of all certificate issuance.
[ Parent | on HN ]
Re:ACME v2 and Wildcard Certificate Support is Live by amaccuish on Wednesday March 14, 2018 @01:09AM (#16582496)
Most CAs aren't automated :) I believe any that do ensure that DNS requests are tried from multiple different locations to prevent this happening. Though you're right, the standards haven't caught up yet.
[ Parent | on HN ]