CAcert System Admins discussion list

["Sam Johnston" <samj AT samj.net>]

On Wed, Aug 27, 2008 at 3:46 PM, IanG <iang AT cacert.org> wrote:

$ whois iang.org | grep CAcert-auth

It looks a lot simpler to me than checking DNS, but I gather
DNS is checkable via other programs.  Or, have I missed something?

Perhaps but this doesn work for many domains and would likely be unreliable. Such checks should go in the DNS itself, and be conducted as and when we see fit (probably as often as we can, within reason). Problems should be alerted and if not resolved promptly then certificates should be revoked. This solves the problem of domain turnover too (eg ownership changes).

Sam