51 ms·
If you can't trust your TLD operator, then you should definitively change your domain name. Otherwise they could fake their NS query responses for your domain a
by 0x0 10y ago
If you can't trust your TLD operator, then you should definitively change your domain name. Otherwise they could fake their NS query responses for your domain at any time and obtain certificates from other CAs during DNS/HTTP validation. You've already lost if your TLD operator is out to get you. Pick a more trustworthy TLD next time.
As a bonus, determining the shadyness of a domain based on the TLD is something even many regular end users can be capable of, because it is so visible. End users never look at SSL CA chains, but the TLD is visible front and center.
- throwawayReply 10y agoModern browsers have been hiding more and more of the URL. Yes, the domain with tld is still visible for now, but the trend is to cut out anything that might confuse a user. Eventually it wouldn't surprise me if that included cutting out the URL completely for EV and just showing the validated name. It also wouldn't surprise me if the TLD gets greyed out and diminished compared to the domain below that sooner rather than later.
- 0x0 10y agoNo way. They might as well remove the entire URL bar then. It'd be way too easy to phish if you couldn't tell the difference between .com/.net/.org, never mind all the ridiculous new TLDs like .plumber and .guru.
- throwawayReply 10y agoMobile phones already don't show the URL bar most the time.