Comment

Comment by seemslegit

Let's be honest here, the article is to demonstrate that you have some grasp of how https works.

In particular the statement "They confirm the identity of the certificate owner & provide proof that a certificate is valid. " is dangerously misleading for the "layman" as the basic HTTPS certificate issuance does not involve any sort of owner identity confirmation, just that whoever requested the certificate had control of the DNS record for that domain at the time of the request.

parent seemslegit 6 years ago

Discussion

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton