[cabfpub] Non-whitelisted email addresses used for DV issuing

Sigbjørn Vik sigbjorn at opera.com
Mon Mar 30 02:47:46 MST 2015


Hi,

According to http://www.kb.cert.org/vuls/id/591120, some issuers use
non-whitelisted email addresses to verify domain ownership.

The only link to such is
http://account.buyhttp.com/knowledgebase/753/Which-email-address-can-approve-SSL-certificate-order.html
(sic), it is unclear how many issuers this affects.

-- 
Sigbjørn Vik
Opera Software


More information about the Public mailing list