3 ms·

Isn't that a really, really juicy target though?

• Ayesh 9mo ago
  LetsEncrypt doesn't see your private key when you obtain the certificate. So no, it's not _really_ a juicy target.
  • account42 9mo ago
    On the other hand, who's gong to notice a LE issued cert that they did not request in the certificate transparency logs?
    • cpach 9mo ago
      The ones who monitor their domains in the CT log. (Mom-and-pop-stores probably won’t. Other orgs might.)