Re:Automate Public Certificates Lifecycle Management via RFC...
by iancarroll on Wednesday April 13, 2022 @07:32PM
(#31021615)
Respectfully, you have a very optimistic view of how this plays out in practice, or even just from what is written in that article. Having obtained several EV certificates for "Stripe Inc", a company I created for $100 on the internet, this is a very basic process with very minimal safeguards. For example, Dun & Bradstreet really does not verify anything at all in its database, and most of the system is based around it for US-based certificates.
https://arstechnica.com/information-technology/2017/12/nope-...