Comment

Comment by hdgvhicv

Only if someone had visited that site before, and it’s insanely risky and would damage far more sites than would save.

The issuing was detected almost immediacy thanks to CT, and as we move to shorter certificate lifetimes the impact is continually reducing.

The CAA record in dns is a weak link though.

parent hdgvhicv 1 month ago

Discussion

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton