Log in or Sign up

Google calls for halting use of WHOIS for TLS domain verifications

Discussion in 'other security issues & news' started by ronjor, Sep 21, 2024.

ronjor Global Moderator

Joined:

Jul 21, 2003

Posts:

177,042

Location:

Texas

Dan Goodin - 9/20/2024

WHOIS data is unreliable. So why is it used in TLS certificate applications?
Certificate authorities and browser makers are planning to end the use of WHOIS data verifying domain ownership following a report that demonstrated how threat actors could abuse the process to obtain fraudulently issued TLS certificates.
Click to expand...

ronjor, Sep 21, 2024

#1

(You must log in or sign up to reply here.)

This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
By continuing to use this site, you are consenting to our use of cookies.

Accept Learn More...