GitHub Pages generated a TLS cert for my own domain

Re:GitHub Pages generated a TLS cert for my own domain by regecks on Wednesday April 18, 2018 @07:42AM (#16866483)

At least with Let's Encrypt, you can revoke a certificate issued by a different ACME account, as long the ACME account you are revoking from has a valid authorization for all of the DNS identifiers on the certificate being revoked.

Of course, this is useless if the certificates were issued under a different CA, so your point is still valid. Prevention is better :) !

[ Parent | on HN ]

Re:GitHub Pages generated a TLS cert for my own domain by Ajedi32 on Wednesday April 18, 2018 @10:25AM (#16867622)

> ACME account you are revoking from has a valid authorization for all of the DNS identifiers on the certificate being revoked

Does this mean that if GitHub did what CloudFlare does and batched multiple domains they serve into the same cert you wouldn't be able to revoke it?

I guess with a 90-day expiry it's not that big of a deal...

[ Parent | on HN ]

Re:GitHub Pages generated a TLS cert for my own domain by regecks on Wednesday April 18, 2018 @05:26PM (#16871350)

Yeah, that's a good point too.

[ Parent | on HN ]