undefined | Better HN

0 pointsikeboy10y ago0 comments

You just made me wonder what happens if you have a cert but let the name expire. Can you MITM your old domain until the cert expires?

0 comments

Sure, if you can get the client to connect through your machine.

ikeboyOP10y ago

If that's the case, shouldn't all certs only be valid until the domain expires, and all domain name sales should require revocation of all certs?

Sure, but how do you enforce the latter?

j / k navigate · click thread line to collapse

0 pointsikeboy10y ago0 comments

You just made me wonder what happens if you have a cert but let the name expire. Can you MITM your old domain until the cert expires?

Sure, if you can get the client to connect through your machine.

ikeboyOP10y ago

If that's the case, shouldn't all certs only be valid until the domain expires, and all domain name sales should require revocation of all certs?

Sure, but how do you enforce the latter?

j / k navigate · click thread line to collapse