4 ms·

Ok, then we need to stop using DNS. Your record server being compromised shouldn't be able to imply ownership.

• kuschku 9y ago
  Or we should require DNSSEC for DV certificates.
  • IncRnd 9y ago
    You're right that something should be used, but DNSSEC is a weak solution from a security point of view.
• mehrdadn 9y ago
  I... agree? In fact that's quite literally what I was saying?