4 ms·
Perhaps the use of the word "certificate" is somewhat to blame here? .. in ordinary English, a "certificate" is a proof or guarantee of authenticity.
by lotsoflumens 10y ago
Perhaps the use of the word "certificate" is somewhat to blame here?
.. in ordinary English, a "certificate" is a proof or guarantee of authenticity.
- okket 10y agoThe simple 'domain validated' certificates, which are the only ones Let's Encrypt issues, only certify that the domain owner has access to the secret key. It guarantees that the data exchanged is private, not that the domain owner is doing nothing illegal.
- lotsoflumens 10y agoYes, I know. Tell that to your grandmother.
- okket 10y agoCan't, they are dead. But I have an idea: Since all new Let's Encrypt certificates get reported to certificate transparency sites, why not set up a bot that searches them for 'paypal' and send alarms to PayPal and the registrar about possible abuse?
- lotsoflumens 10y agoYes! Just like a DMCA bot searches for media and automatically files a complaint?
- okket 10y agoI doubt it will be the same amount. This is real criminal scam and theft, not drive-by ad-click farming.