alt Hacker Newshttp-01 seems absolutely unreliable, any hosting provider or any government can issue fake certificates using it. What a garbage technology.
Replies
Lex-2008 • today at 5:01 PM
Agreed. On the other hand, these DV certificates only claim to verify who _controls_ the domain. Probably, you can agree that hosting provider and government can also control the domain, no? :)
Moreover, with dns-01, DNS provider can issue fake certificates - unless you self-host DNS - in which case, only your DNS registrar can... and a government.
The point is to prove you control a domain. If you are answering traffic to requests from clients at that domain, you control it. Whether you're supposed to have control over it is outside the scope of this validation