4 ms·
This isn't new... there has existed DNS only SSL certificate verification for quite a while. Let's Encrypt's only job is to not issue certificates to people wh
by throwaway2016a 10y ago
This isn't new... there has existed DNS only SSL certificate verification for quite a while.
Let's Encrypt's only job is to not issue certificates to people who don't own a domain. Not to ensure the content of the domain is legitimate. That's what EV certs are for.
- pfg 10y agoTo be more specific: EV validates that the entity requesting the certificate is who they claim to be, in addition to demonstrating domain ownership. No validation level makes any kind of guarantee regarding the legitimacy or accuracy of content.
- throwaway2016a 10y agoYes. Thank you for clarifying, I wasn't clear.