@domi not sure if you also noticed this, but I was looking through the CAs who issue certs for .arpa domains apart from Cloudflare and I noticed that WoSign gives free certs: https://crt.sh/?Identity=ip6.arpa&iCAID=1662
@domi nevermind, this CA was removed from Chrome and Firefox lol
@eloy @domi Oh boy, WoSign is, uh, a story and a half: https://git.cryto.net/joepie91/ca-incidents#wosign
@joepie91 @domi an updated version (there's a bunch more pre-history too ofc) would make a good CCC talk