4 ms·
Yeah but because they own the TLD they can get X.509 certs issued for any domain under it, because controlling the domain is the only check CAs really perform b
by topranks 8y ago
Yeah but because they own the TLD they can get X.509 certs issued for any domain under it, because controlling the domain is the only check CAs really perform before issuing a cert for a domain.
The DNS is already acting as the root of trust for X.509. X.509 does not make the scenario of a rogue TLD operator any different.