4 ms·

The attacker who buys a bunch of domains and legitimately owns them for a period of time wouldn't have any issue getting SSL certificates for them.

• prolurker 9y ago
  Correct, but, even if not explicitly said, the cached entries should be associated to the certificate's fingerprint and immediately discarded once the certificate expires or is changed.
  • rav 9y ago
    Certificates often change for legitimate reasons, e.g. Let's Encrypt certificates which must be changed every 3 months.
    • geon 9y ago
      That would be ok.