DV certificates does provide a service that self-signed certificates don't, thou... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		Nullabillity on Nov 20, 2015 \| parent \| context \| favorite \| on: Domain-validated SSL will soon be free from the la... DV certificates does provide a service that self-signed certificates don't, though: they verify that the server controls x.com according to the public DNS system, not just according to the user's ISP/DNS server.

avian on Nov 20, 2015 [–]

Strictly speaking, they verify that server controls x.com according to the CA's ISP/DNS server/any other parties in the middle instead of the user's ISP/DNS server/any other parties in the middle.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact