This is partially right(!) A security researcher once obtained a certificate for Microsoft's live.com domain by registering an email account sslcertificates@li

This is partially right(!) A security researcher once obtained a certificate for Microsoft's live.com domain by registering an email account sslcertificates@live.com and using it to reply to the CA's verification email. http://www.theregister.co.uk/2011/04/11/state_of_ssl_analysis/ http://www.theregister.co.uk/2011/04/11/state_of_ssl_analysi...