News for hackers. Stuff that matters.

A comment on Chrome 69: “www.” subdomain missing from URL. Parent comment

Re:Chrome 69: “www.” subdomain missing from URL by hjfa0j on Thursday September 06, 2018 @02:43PM (#17928491)
It started being meaningless thanks to Let's Encrypt. Before it meant you had to show your ID and banking info to a "reputable" corporation for them to make a cert for you. Yes I know I know, not always the case, but...

LE means that the mantra "if it's https then it's a secure and reputable website" is now outdated.

[ Parent | on HN ]
Re:Chrome 69: “www.” subdomain missing from URL by detaro on Thursday September 06, 2018 @02:44PM (#17928501)
> Before it meant you had to show your ID and banking info to a "reputable" corporation for them to make a cert for you.

No it didn't. Let's Encrypt made free certificates easier to get, but Let's Encrypt doesn't do less verification than some other CAs/some of their products.

[ Parent | on HN ]
Re:Chrome 69: “www.” subdomain missing from URL by dragonwriter on Thursday September 06, 2018 @03:03PM (#17928693)
> Before it meant you had to show your ID and banking info to a "reputable" corporation for them to make a cert for you.

No, it didn't. DV certs never meant that (EV certs did and still do, but LE doesn't offer EV and EV isn't and never was necessary for the padlock.)

[ Parent | on HN ]
Re:Chrome 69: “www.” subdomain missing from URL by hnbroseph on Thursday September 06, 2018 @03:34PM (#17928942)
are you that Comodo guy?
[ Parent | on HN ]