Hacker News new | past | comments | ask | show | jobs | submit login

It has to be baked into the CA, so that a browser vendor can check it before inclusion. If the CA specifies domains it is not allowed to sign certificates for, it will not be included.



Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: