If the browser enforced that the certificate had been issued in line with the do...

lol768 on Feb 2, 2023 | parent | context | favorite | on: Stop the proposal on mass surveillance of the EU

If the browser enforced that the certificate had been issued in line with the domain's CAA record, such an attack might be less tractable without DNS control...