3 ms·
When enabled, it forces a domain to be signed by a CA to be displayed. Effectively giving the CA a veto over the content.
by crazypython 6y ago
When enabled, it forces a domain to be signed by a CA to be displayed. Effectively giving the CA a veto over the content.
- StavrosK 6y agoI guess, but only in the way your power provider has veto over the content. The CA doesn't care about the content, only about you proving that you own the domain.
- crazypython 6y agoLike CAs, the power company can be controlled by the government. Let's say governments ban youtube-dl. The prosecution gets a court order to order CAs to not renew youtube-dl.org. If they're using a Let's Encrypt style 30 day certificate, youtube-dl has 30 days to comply or be soft-banned from the internet.
- StavrosK 6y agoWhy go to the CA when they can just order the domain itself to be shut down? If there's a court order against you, your site being HTTP won't save you.