3 ms·
Does my site need HTTPS?
- xg15 3y agoI still find it slightly nebulous what exactly the condition is that a DV certificate is proving. In practice, it's that at the time of the challenge, the DNS entry (as observed from one or more secret locations on the internet) is under the requester's control. But couldn't this be archived a lot simpler by having the registrar also be the CA and automatically generate a cert when I update the DNS? Why do we even need separate CAs at all still?
- Kesseki 3y agoThis is permitted: https://github.com/cabforum/servercert/blob/main/docs/BR.md#322412-validating-applicant-as-a-domain-contact https://github.com/cabforum/servercert/blob/main/docs/BR.md#... But it hasn't really caught on; a lot of registrars don't seem to want the complexity of being (or integrating with) a CA, and vice versa.
- mattl 3y agoI’d like to see a way to serve up a page to very old browsers that don’t support TLS while giving modern browsers the latest TLS cyphers.