3 ms·

What if someone hijacks a domain? Should they issue one then? I'll say this, I don't want to see "Let's Encrypt" go on some moral crusade deciding not to grant

What if someone hijacks a domain? Should they issue one then? I'll say this, I don't want to see "Let's Encrypt" go on some moral crusade deciding not to grant a certificate to a website because that website contains offensive content, but their job is to verify at least somewhat the identity of the requester to try and stem impersonation.

the8472 11y ago
> What if someone hijacks a domain? But that's a registrar problem, not a "proof that this connection comes from someone who controls that domain" problem. These aren't EV certificates.
- _cpancake 11y ago
  Part of HTTPS is making sure that the person you're talking to is the person you think you're talking to.
  - the8472 11y ago
    That's what EV certificates are for. Otherwise https only gurantees that you're actually talking to the domain you see in the URL, not who that domain belongs to.
tedunangst 11y ago
The fact that I seized a domain ten years ago doesn't mean I'm not who I say I am today. Also, seizure and hijacking aren't equivalent.