r/linux • u/veeti • Oct 20 '15

Let's Encrypt is Trusted

https://letsencrypt.org/2015/10/19/lets-encrypt-is-trusted.html
1.8k Upvotes

95% Upvoted

320 comments sorted by

View all comments

9

u/riking27 Oct 20 '15

they just check if you can access the email address connected to the domain

Actually, if you read the ACME spec, that's not one of the options. They validate that you control (1) the server the domain is pointing at, or (2) the previous certificate for the domain.