3 ms·
> Domain validated SSL was always a bad idea. I strongly disagree. We need to move towards using TLS everywhere and part of doing that is making it easy for ev
by driverdan 12y ago
> Domain validated SSL was always a bad idea.
I strongly disagree. We need to move towards using TLS everywhere and part of doing that is making it easy for everyone to get a cert. You can validate domain control through DNS / whois records instead of the standard group of admin email address.
- nailer 12y agoSure, but there are no rules requiring that, which means browsers must treat all DV certs as the lowest common denominator.