News for hackers. Stuff that matters.
Re:Free SSL Certificate for Open Source Projects by Pyramids on Saturday June 07, 2014 @09:28PM (#7863666)
As it stands, the majority of CA's do not verify any of this information, besides a very cursory email verification.

Exceptions would obviously include higher priced (OV/EV) certificates, which are no different cryptographically. Even the CA mentioned (GlobalSign) states this fairly clearly on their website.[1]

[1] https://www.globalsign.com/ssl-information-center/types-of-s...

There are no comments on this comment yet.