3 ms·
A cert in your domain name. Something they could always do. As can anyone you've given control of your domain to. Domain validation is how most certificates are
by nknighthb 12y ago
A cert in your domain name. Something they could always do. As can anyone you've given control of your domain to. Domain validation is how most certificates are issued.
- spacefight 12y agoThey could have done that by MITM the validation email you mean? EDIT: Ah, there are more options than email validation - my CA didn't offer those. Learned something, thanks.
- nknighthb 12y agoNo. Email is not the only supported method of domain validation. See, for example, Comodo's documentation: https://support.comodo.com/index.php?/Default/Knowledgebase/Article/View/791/16/alternative-methods-of-domain-control-validation-dcv https://support.comodo.com/index.php?/Default/Knowledgebase/...
- deleted 12y ago[deleted]