Re:Let's Encrypt Overview
by wtetzner on Friday June 12, 2015 @02:25PM
(#9707660)
I think this is the reason other validation forms exist, i.e. Organization Validation and Extended Validation.
[ Parent
| on HN ]
It shouldn't be easy for me to generate a cert for your domain.
Re:Let's Encrypt Overview
by organsnyder on Friday June 12, 2015 @02:34PM
(#9707722)
I've never heard conducting a MITM attack on the Internet backbone or hosting provider as "easy" before (other than by governments—but they probably already have plenty of vectors for generating fake certs). Now, if you're serving HTTP over an unknown wifi access point...