undefined | Better HN

story

0 pointsacdha6y ago0 comments

It seems pretty different from a password because you're not giving control of your domain: if they broke their contract, you could take it back at any time.

That's the other odd part about this complaint: you're trusting a company like GitLab not to break their terms of service, which is a potential factor to consider but also one where they'd have severe negative outcomes to their business if they went rogue. Since you're already trusting a number of other parties, why is this one so much scarier?

0 comments

nybble416y ago

> It seems pretty different from a password because you're not giving control of your domain: if they broke their contract, you could take it back at any time.

You are giving them everything they'd need to obtain a DV certificate for your domain, though. You can stop them from using it at any time just by changing the DNS records, but you'd need to wait at least two years (825 days for maximum TLS certificate duration) before you could be certain any certificates they had been issued before that point had expired.

j / k navigate · click thread line to collapse

0 comments

nybble416y ago

> It seems pretty different from a password because you're not giving control of your domain: if they broke their contract, you could take it back at any time.

j / k navigate · click thread line to collapse