3 ms·
It seems like "one guy pinning certificates to Chrome" might be an interesting attack vector. How does he verify you actually work for the high-profile site in
by kevinburke 14y ago
It seems like "one guy pinning certificates to Chrome" might be an interesting attack vector. How does he verify you actually work for the high-profile site in question?
- nwh 14y agoSame way they do other verifications I suppose; by proving you have write access to the server in question. If someone malicious can manage that, there's bigger problems than SSL.
- asdfaoeu 14y agoPresumably it still checks the certificate is valid otherwise the worse case would just be that the legitimate site would not work.