Hacker News Reader

What was the CA thinking when they said, "Sure we'll give you a wildcard cert for any domain!"

I've un-trusted their cert... http://nathan.vertile.com/blog/2015/02/20/untrust-cloudflare...

CloudFlare doesn't have the ability to provision a certificate for any domain. They'd have to demonstrate control - usually with a webmasteer/hostmaster@example.com style email address or a DNS record. Easy for them to do for domains they host, not something they can do for Google.com.

Reply on news.ycombinator.com