3 ms·
For some reason I thought CA's at least talked to each other to see if someone else had issued a valid cert for a given domain along the lines of owning a domai
by 24gttghh 9y ago
For some reason I thought CA's at least talked to each other to see if someone else had issued a valid cert for a given domain along the lines of owning a domain name itself through a registrar. Clearly that only works when DNS isn't being abused like this...
- xnyanta 9y agoWhy should websites be limited to having only one certificate? For example, if you have a service running on multiple backed servers, you might want to have once certificate per server for all of your domains.
- notriddle 9y agoThat use case still wouldn't explain a domain having certs from two different CAs.