Especially when we have TLDs for this purpose (.test and .invalid), it's just pl... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

cube00 on Jan 21, 2017 | parent | context | favorite | on: Symantec issues more illegit HTTPS certificates

Especially when we have TLDs for this purpose (.test and .invalid), it's just plain sloppy.

agwa on Jan 21, 2017 | [–]

CAs would not be allowed to use those TLDs under the current rules. They have two options for testing:

1. Use domains they own.

2. Use a testing environment that doesn't issue publicly-trusted certificates.

JumpCrisscross on Jan 21, 2017 | [–]

> * it's just plain sloppy*

Sloppy is an oopsy. This is negligence.

Consider applying for YC's Fall 2026 batch! Applications are open till July 27.
Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact