3 ms·
Malicious DNS can request cert for the domain via e.g. let's encrypt, then it can do whatever it wants.
by cherioo 10y ago
Malicious DNS can request cert for the domain via e.g. let's encrypt, then it can do whatever it wants.
- jsn 10y agoMy understanding is that it doesn't apply at least to EV certificates. Also, the parent says that "any user who is delegating their DNS lookups to a third party", but that can't apply to such users either.