|
|
|
|
|
|
by mnordhoff
2979 days ago
|
|
|
> why the DNS test usualy takes >60 seconds The server-side part of DNS validation takes about a second. The delay is all about clients waiting for their authoritative DNS servers to update. If you use a fast DNS provider, there's no reason to wait longer than necessary. > If any certs were issued for hijacked domains (which as far as I've ready was only one, not using LetsEncrypt), it's a pretty glaring failure on the issuer, assuming they used "DNS Validation" It wouldn't be a compliance failure, though. CAs are not required to be invulnerable to BGP hijacking attacks. |
|
|