GlobalSign: RSA-1024 leaf certificate issued after 2013-12-31

Re:GlobalSign: RSA-1024 leaf certificate issued after 2013-1... by tristor on Tuesday February 09, 2021 @08:35PM (#26084856)

Technically, it appears that a validation link to prove domain ownership was sent 10 (or 11) years prior, but wasn't clicked until recently. The issue isn't that ownership was proven ten years ago, the issue is that the link to do so was still valid for such a long period of time rather than being expired.

[ Parent | on HN ]

Re:GlobalSign: RSA-1024 leaf certificate issued after 2013-1... by kevincox on Wednesday February 10, 2021 @01:35PM (#26093034)

Well yes. That was an obvious issue. However the point is that the email was received 10 years ago, so you are only proving that you had control of the domain at that time.

Of course validation links should expire in a relatively short timeframe.

[ Parent | on HN ]