Google calls for halting use of WHOIS for TLS domain verifications
Certificate authorities and browser makers are considering stopping the use of WHOIS data for domain ownership validation following a report on how fraudulently issued TLS certificates can be obtained using the process. The proposal to phase out WHOIS data use has received over 50 comments, with some supporting the change, while others question its necessity. Amazon recommends extending the sunset date to April 2025, backing up its proposal with the fact that it has already stopped using WHOIS records.
Source: arstechnica.com
- Read more