News for hackers. Stuff that matters.
Re:Automate Public Certificates Lifecycle Management via RFC... by iancarroll on Wednesday April 13, 2022 @07:32PM (#31021615)
Respectfully, you have a very optimistic view of how this plays out in practice, or even just from what is written in that article. Having obtained several EV certificates for "Stripe Inc", a company I created for $100 on the internet, this is a very basic process with very minimal safeguards. For example, Dun & Bradstreet really does not verify anything at all in its database, and most of the system is based around it for US-based certificates.

https://arstechnica.com/information-technology/2017/12/nope-...

There are no comments on this comment yet.