Hacker News
new
|
past
|
comments
|
ask
|
show
|
jobs
|
submit
login
cherioo
on July 16, 2016
|
parent
|
context
|
favorite
| on:
CloudFlare, We Have a Problem
Malicious DNS can request cert for the domain via e.g. let's encrypt, then it can do whatever it wants.
jsn
on July 16, 2016
[–]
My understanding is that it doesn't apply at least to EV certificates. Also, the parent says that "any user who is delegating their DNS lookups to a third party", but that can't apply to such users either.
Guidelines
|
FAQ
|
Lists
|
API
|
Security
|
Legal
|
Apply to YC
|
Contact
Search: