Re: Let's Encrypt appears to issue a certificate for a domain that doesn't exist

2017-02-22 Thread Tony Zhaocheng Tan via dev-security-policy
Yep, no issue here anymore. Josh Aas hadn't posted on hacker news when I sent this. Thanks, Tony Tony Zhaocheng Tan | t...@tonytan.io | PGP Key Original Message On Feb 22, 2017, 7:30 PM, Gervase Markham wrote: On 22/02/17 14:42, Tony Zhaocheng Tan wrote: > On 2017-01

Let's Encrypt appears to issue a certificate for a domain that doesn't exist

2017-02-22 Thread Tony Zhaocheng Tan via dev-security-policy
On 2017-01-03, Let's Encrypt issued a certificate for apple-id-2.com. However, until today, the domain apple-id-2.com has apparently never been registered. How was the certificate issued? Sources: https://crt.sh/?q=24ba82659f808f6c5af1816857701bf970cf6ec5751357fea42ef8c4140a4caf

Re: Guang Dong Certificate Authority (GDCA) root inclusion request

2016-11-15 Thread Tony
在 2016年11月15日星期二 UTC+8下午5:53:19,Gervase Markham写道: > On 15/11/16 08:39, Percy wrote: > > I posted on the solidot (Chinese Slashdot) about this. The majority > > comments want the application rejected. > >