3 ms·
> certified by our beloved LetsEncrypt Are you saying that CAs should be refusing to issue certs for potentially spoofed domains?
by jefftk 3y ago
> certified by our beloved LetsEncrypt
Are you saying that CAs should be refusing to issue certs for potentially spoofed domains?
- pipo234 3y ago...or Digicert, Globalsign, the Hongkong post office, whichever CA is in your truststore. I just mentioned LetsEncrypt because it's free and exceptionally easy to use. I'm not implying in any way they aren't providing a great service, it's just that that service also gets misused because it's cheap and easy.