Timeline for How does registration authority verify entity's identity for SSL?
Current License: CC BY-SA 3.0
10 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Jul 14, 2020 at 3:30 | comment | added | Krenair |
note from cabforum.org/wp-content/uploads/CA-Browser-Forum-BR-1.7.0-1.pdf - 3.2.2.4.1 Validating the Applicant as a Domain Contact, 3.2.2.4.5 Domain Authorization Document and 3.2.2.4.9 Test Certificate are listed as retired and MUST NOT be used. There's also some new ones.
|
|
| Oct 29, 2017 at 12:27 | comment | added | tialaramex | Indeed it does, however it also says those are examples. 3.2.2.4.10 is pretty technical, so probably anybody who understands how it works isn't going to be reading an introductory text like that. Let's Encrypt call their implementation of 3.2.2.4.10 "tls-sni-01" if you need to find evidence of that ("http-01" is 3.2.2.4.6 and "dns-01" is 3.2.2.4.7). | |
| Oct 29, 2017 at 12:20 | comment | added | croraf | Thanks! I found letsencrypt.org/how-it-works now as additional source to your answer. And it mentions 3.2.2.4.6 and 3.2.2.4.7 only. | |
| Oct 29, 2017 at 12:19 | history | edited | tialaramex | CC BY-SA 3.0 |
Clarify that "methods" are methods to validate control over a name
|
| Oct 29, 2017 at 12:18 | comment | added | tialaramex | I will adjust the answer to make that clearer. | |
| Oct 29, 2017 at 12:17 | vote | accept | croraf | ||
| Oct 29, 2017 at 12:15 | comment | added | tialaramex | Also the applicant may not be the domain contact. Assuring themselves of this is one of the goals of most methods. | |
| Oct 29, 2017 at 12:13 | comment | added | tialaramex | Any method which, in their sole opinion, was adequate for this purpose. Yes, prior to the Ten Blessed Methods that was the case. | |
| Oct 29, 2017 at 11:55 | comment | added | croraf | ' CAs could use "any method" '- do you mean any method to confirm the digital certificate applicant (which is called domain contact?) is who he pretends to be? | |
| Oct 29, 2017 at 11:47 | history | answered | tialaramex | CC BY-SA 3.0 |