4 ms·Wouldn't you say it would be enough to pin those certs to TLDs?by d33 9y agoWouldn't you say it would be enough to pin those certs to TLDs?nl 9y agoBy TLD do you mean country domains? Then absolutely not. Why should a US company not be allowed to use a Swiss-issued certificate for a .io domain name?duskwuff 9y agoAnd for that matter -- if a CA really is untrustworthy, why should domains under any TLD be exposed to them?