Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Well how do you think they got Cloudflare to issue a cert on their behalf? By proving ownership of the domain...


Oh, hang on. Let me get the SSL certificate for “definitelyukrainegovernment.com”. Then you can donate money to the Ukraine gov on that site too.


Well I wouldn't judge the authenticity of a site based on the SSL cert which the OP seemed to do which was my point


Depends on the cert. If the cert is issued to "Kancelaria Prezesa Rady Ministrów" I am pretty sure the site belongs to the Polish government.


Are you sure about that? What if I create an LLC in Florida with that name?


Ohhhh. I see now what you meant.


They aren't doubting that the people who set up CloudFlare didn't own the domain, they're saying the cert is anonymous.


I guess so, it just seemed weird to point out


Not really, seeing who the certificate was issued to is a good way of figuring out whom the site belongs to (or at least it was, before Let's Encrypt).





Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: