Certificate Authority shenanigans

16 views

Skip to first unread message

Kurt Buff

unread,

Sep 8, 2025, 4:33:51 PMSep 8

to ntsys...@googlegroups.com

Cloudflare is miffed, with good reason

https://blog.cloudflare.com/unauthorized-issuance-of-certificates-for-1-1-1-1/

But to me the deeper problem is the issuance of certificates for IP addresses. That seems very problematic. I understand that it might be useful for, .e.g, securing BGP, but I don't think it has been thought through carefully enough.