3 ms·
Would be cool if this could be tied to SSL keys. Being able to serve requests with the same SSL key could be used as verification. (obviously some edge cases li
by foota 7y ago
Would be cool if this could be tied to SSL keys. Being able to serve requests with the same SSL key could be used as verification. (obviously some edge cases like people that are behind some kind of common SSL cert like a subdomain with shared hosting)
- loa_in_ 7y agoThat's impossible due to the way assymetric encryption works. It would help to indicate to the user, and maybe allow searching/grouping by certificate hash to transcend domain names
- deleted 7y ago[deleted]
- foota 7y agoIsn't that what cert pinning does though?
- chousuke 7y agoI think it would make more sense to tie the behaviour to the domain's whois record. If that changes significantly, chances are the domain has changed owners.
- foota 7y agoThis is true, but the whois isn't really a highly official source.
- dredmorbius 7y agoActually, it is. It's the TLD registrar's record. The usefulness of WHOIS has been declining precipitously, largely as useful information has been horribly misused and abused.