3 ms·
Require them to use the same cert as for their main site, so a CA compromise is required. Also have it published in certificate transparency databases, so a ta
by ikeboy 10y ago
Require them to use the same cert as for their main site, so a CA compromise is required.
Also have it published in certificate transparency databases, so a targeted attack is impossible.