4 ms·
Domain tasting? Get a cert for it, then it expires?
by X-Istence 10y ago
Domain tasting? Get a cert for it, then it expires?
- Artemis2 10y agoI've been wondering how that could be done in a practical way. You'd have to register domains that people are likely to register in the next 90 days. You could probably just resell the domains if you were able to predict that.
- tialaramex 10y agoBest defence against this, if you're worried, is to wait 24 hours after gaining control of the domain, then check Certificate Transparency monitors for issuance in that domain. (24 hours is the CT Maximum Merge Delay, a correctly operating log promises to be able to reliably and consistently tell the monitors about any certificates logged more than 24 hours ago)