3 ms·
Is there any way to discover a list of SSL certs that have been issued for a domain? The problem here is, once someone has shown that they could receive emails
by joosters 12y ago
Is there any way to discover a list of SSL certs that have been issued for a domain?
The problem here is, once someone has shown that they could receive emails for administrator@yourdomainname, you have no idea how many SSL certificates they bought, and from which CAs.
Even if they publish a blog post about it and show you a certificate, surely your domain is now compromised? You can revoke that certificate, but how do you know that was the only one they obtained?
From this point on, all you know is that your domain name is potentially compromised and there's nothing you can do to fix it...
- ivanr 12y agoNo. Certificate Transparency [1] might eventually make it possible, but it's still early days. A much wider adoption is needed. [1] http://www.certificate-transparency.org/ http://www.certificate-transparency.org/
- vbezhenar 12y agoPublic Key Pinning could help for users running compliant browsers.