3 ms·
In the process you describe, there is no step where you confirm that you are actually the domain owner. Anyone could obtain a certificate for google.com. Verif
by pfg 9y ago
In the process you describe, there is no step where you confirm that you are actually the domain owner. Anyone could obtain a certificate for google.com.
Verifying domain ownership is what the challenges are responsible for.