Score:0

What if you give a certificate without domain authentication?

cn flag

I know that domain authentication is required to get a certificate for HTTPS. But I really don't know why this is needed. Can't you just give a certificate without domain verification? What happens if I just give the certificate? Are there any concerns?

I searched the website, but couldn't find a satisfactory answer. I'm very curious about that part.

slightly_toasted avatar
bd flag
What exactly do you mean by domain authentication? As in creating a TXT record to verify that a person is in control of a domain?
Score:0
cn flag

This is necessary to avoid web site spoofing. If you own specific domain -- you can get a certificate for that specific domain only.

Otherwise, anyone could request a trusted certificate for microsoft.com or google.com web sites and spoof them.

mangohost

Post an answer

Most people don’t grasp that asking a lot of questions unlocks learning and improves interpersonal bonding. In Alison’s studies, for example, though people could accurately recall how many questions had been asked in their conversations, they didn’t intuit the link between questions and liking. Across four studies, in which participants were engaged in conversations themselves or read transcripts of others’ conversations, people tended not to realize that question asking would influence—or had influenced—the level of amity between the conversationalists.