I revoked $1M worth of EV certificates

Re:I revoked $1M worth of EV certificates by commandlinefan on Saturday September 14, 2019 @08:41AM (#20970425)

When I saw that google, amazon, apple and Microsoft weren’t bothering with EV certs, I figured I didn’t need to either.

[ Parent | on HN ]

Re:I revoked $1M worth of EV certificates by megous on Saturday September 14, 2019 @08:55AM (#20970496)

Google's cert is not really domain validated either. They have their own CA.

Microsoft also has a CA.

Apple has EV and Amazon uses DigiCert, which is the only one that may be domain validated, perhaps.

[ Parent | on HN ]

Re:I revoked $1M worth of EV certificates by tialaramex on Saturday September 14, 2019 @01:06PM (#20972176)

All four of them own publicly trusted CAs. However, they are certainly required to validate all the certificates they issue even to themselves.

Several (all?) of them are domain registrars and so they would be able to rely on that to shortcut issuance validation for names in domains for which they are both registrar and owner, but it still happens it's just easier.

[ Parent | on HN ]