Submission + - Does SSL Validation Matter?
An anonymous reader writes: Right now, in an email list excluded from the public eye some bright people are discussing the future of SSL. At debate is (a) do they allow DV (domain only validation) certificates to continue to exist (exist for e-commerce use? only encryption use?) or do they require a higher degree of certificate validation? (b) Do they allow certificates to be issued with non-unique common names (certificates used on internal networks, think your exchange server) or do they ban the practice? If this were 'hypothetically' a heated debate going on right now and you could chime in, what would you say? Hypothetically. I would love to hear from the slashdot community.
