3 ms·
Well how do you think they got Cloudflare to issue a cert on their behalf? By proving ownership of the domain...
by weird-eye-issue 5y ago
Well how do you think they got Cloudflare to issue a cert on their behalf? By proving ownership of the domain...
- renewiltord 5y agoOh, hang on. Let me get the SSL certificate for “definitelyukrainegovernment.com”. Then you can donate money to the Ukraine gov on that site too.
- weird-eye-issue 5y agoWell I wouldn't judge the authenticity of a site based on the SSL cert which the OP seemed to do which was my point
- renewiltord 5y agoOhhhh. I see now what you meant.
- praptak 5y agoDepends on the cert. If the cert is issued to "Kancelaria Prezesa Rady Ministrów" I am pretty sure the site belongs to the Polish government.
- weird-eye-issue 5y agoAre you sure about that? What if I create an LLC in Florida with that name?
- stavros 5y agoThey aren't doubting that the people who set up CloudFlare didn't own the domain, they're saying the cert is anonymous.
- weird-eye-issue 5y agoI guess so, it just seemed weird to point out
- stavros 5y agoNot really, seeing who the certificate was issued to is a good way of figuring out whom the site belongs to (or at least it was, before Let's Encrypt).
- weird-eye-issue 5y agoIt never was https://arstechnica.com/information-technology/2017/12/nope-this-isnt-the-https-validated-stripe-website-you-think-it-is/ https://arstechnica.com/information-technology/2017/12/nope-...