News for hackers. Stuff that matters.
Re:Draft Let's Encrypt Subscriber Agreement by the8472 on Thursday May 21, 2015 @03:23PM (#9584873)
> What if someone hijacks a domain?

But that's a registrar problem, not a "proof that this connection comes from someone who controls that domain" problem. These aren't EV certificates.

Re:Draft Let's Encrypt Subscriber Agreement by _cpancake on Thursday May 21, 2015 @10:32PM (#9586380)
Part of HTTPS is making sure that the person you're talking to is the person you think you're talking to.
Re:Draft Let's Encrypt Subscriber Agreement by the8472 on Friday May 22, 2015 @04:50AM (#9587182)
That's what EV certificates are for.

Otherwise https only gurantees that you're actually talking to the domain you see in the URL, not who that domain belongs to.