DigiCert to Revoke 83,000+ SSL Certificates Due to Domain Validation Oversight
Due to an error in its process for determining if a digital certificate is provided to the legitimate owner of a domain, certificate authority (CA) DigiCert has issued a warning that it will be revoked a portion of SSL/TLS certificates within 24 hours.
The business announced that it will revoke certificates that lack valid Domain Control Validation (DCV).
DigiCert verifies the customer's ownership or control over the domain name for which they are requesting a certificate using one of many techniques allowed by the CA/Browser Forum (CABF) prior to issue the certificate to the customer," the company stated.
The customer sets up a DNS CNAME record with a random value that DigiCert provides, and then the company looks up the domain to confirm that the random values match read more a...