Hacker News new | ask | show | jobs
by tiffanyh 519 days ago
Why don’t they revoke the certificate for a special-use domain, like example.com.

As opposed to 30-random entities.

https://en.m.wikipedia.org/wiki/Special-use_domain_name

1 comments

The goal is to ensure not just that the CA is capable of performing the revocation, but that the CA's customers are capable of accepting it and won't demand the timeline be extended. (As they routinely do today.)