4 ms·
They verify domain ownership. If browsers accepted self-signed certificates, then as long as I could intercept your DNS requests (running a public Wi-Fi network
by jaywalk 6y ago
They verify domain ownership. If browsers accepted self-signed certificates, then as long as I could intercept your DNS requests (running a public Wi-Fi network next to a Starbucks, for example) then I could bring you to my malicious google.com without you knowing. That's no good.
- M2Ys4U 6y ago>They verify domain ownership. They verify domain control, not ownership. Verifying ownership is a much harder problem, and one I doubt could be done in an automated fashion.