undefined | Better HN

0 pointsAyesh4mo ago0 comments

LetsEncrypt doesn't see your private key when you obtain the certificate. So no, it's not _really_ a juicy target.

0 comments

2 comments · 1 top-level

account424mo ago· 1 in thread

On the other hand, who's gong to notice a LE issued cert that they did not request in the certificate transparency logs?

cpach4mo ago

The ones who monitor their domains in the CT log.

(Mom-and-pop-stores probably won’t. Other orgs might.)

j / k navigate · click thread line to collapse