3 ms·
And Symantec lost their certification rights because they issued certificates to test.com and example.com?
by nikanj 10y ago
And Symantec lost their certification rights because they issued certificates to test.com and example.com?
- wolf550e 10y agoYou are allowed to have paypal.nikanj.com and a CA is allowed to give you a certificate for it. Some people use them for PayPal IPN. Symantec generated certificates for domains Symantec did not control.
- tokenizerrr 10y agoDid the requesters of that actually control those domains (hint: they didn't)? If I register the domain superawesomepaypalscam.com then that is my domain name. Since it is my domain name and I can control it, obviously I can get a domain validated SSL certificate for it. If I don't control example.com, then obviously I should not be able to get a domain validated SSL certificate for it. If I did, I would be able to MITM people trying to visit example.com (which is not my website), and that is bad. This entire situation is basically working as intended.
- phonon 10y ago...that they didn't own!