mixdup 3 months ago

I mean that applies to DNS authentication for non-IP certificates, too

  • baby_souffle 2 months ago

    > I mean that applies to DNS authentication for non-IP certificates, too

    Right, but "show me you own foo.com" is a pretty reasonable bar to clear for issuing a certificate with a CN of "foo.com".

    Show me you own `1.1.1.1` by manipulating the DNS for "foo.com" is ... not quite the same.