Ars Technica
1 week agoPrivacy professionals
Google calls for halting use of WHOIS for TLS domain verifications
Threat actors can exploit WHOIS data verification to fraudulently obtain TLS certificates, prompting calls for a reevaluation of verification practices. [ more ]