News for hackers. Stuff that matters.

A comment on GitHub Pages generated a TLS cert for my own domain. Parent comment

Re:GitHub Pages generated a TLS cert for my own domain by BuildTheRobots on Wednesday April 18, 2018 @12:19PM (#16868587)
> The surprising bit is that when granting them the right to handle all internet traffic for the given domain (back in 2014), I wasn't expecting them to use it to generate certificates.

I hate to flog a dead horse, but considering you were specifically pointing the domain at them for them to host HTTP, them then securing that really shouldn't be surprising. If they'd started running other services on it (eg email) then I'd start being surprised. HTTP host hosting HTTPs though...

More granular DNS records would be interesting for the future. The ability to say "this host resolves to that IP but ONLY for web traffic and nothing else" (an "ahttp" record) idea intrigues me.

[ Parent | on HN ]
Re:GitHub Pages generated a TLS cert for my own domain by synotna on Wednesday April 18, 2018 @12:26PM (#16868658)
This already exists: SRV records
[ Parent | on HN ]
Re:GitHub Pages generated a TLS cert for my own domain by BuildTheRobots on Wednesday April 18, 2018 @01:48PM (#16869353)
Of course it does; I'm an idiot. Though it does seem like very few applications (I can't find a single mainstream browser) that actually support using them. I do wonder why not.
[ Parent | on HN ]
Re:GitHub Pages generated a TLS cert for my own domain by jimktrains2 on Wednesday April 18, 2018 @03:34PM (#16870312)
Kerberos and AFS use it! There a few others that can, but it's client dependent. It would be nice if more things supported it out of the box.
[ Parent | on HN ]