Re: Let's Encrypt appears to issue a certificate for a domain that doesn't exist

2017-02-23 Thread wuyi via dev-security-policy
According to what I??ve known, ??Acknowledgment and Acceptance: An acknowledgment and acceptance that the CA is entitled to revoke the certificate immediately if the Applicant were to violate the terms of the Subscriber or Terms of Use Agreement or if the CA discovers that the Certificate is b

Re: Let's Encrypt appears to issue a certificate for a domain thatdoesn't exist

2017-02-23 Thread wuyi via dev-security-policy
topic of high risk requests and certs being issued to phishing sites to see Eric Mill's comment in this thread. He has provided a link to past discussion on this topic, and I can promise you that however displeasing and shocking this practice may be, it has already been considered and debated.