Hello, Our website just triggered the “considered an unsafe domain by a third-party API” rejection. In this case, that is correct, broadly speaking. Is it possible to request an exemption from the API result? Issuance Policy sounds like the right area. The denied certificate is for https://malwa…

Hi, [image] aushack: Any help? Thanks! By checking the previous history on the same issue...I don't think there'll be any way to bypass this API check... At least there aren't before. Search results for 'safe browsing' - Let's Encrypt Community Support Please also see The CA's Role in Fight…

Hi, I went ahead and flagged the post for attention by staff. Hopefully one of the LE members who posts here can offer an official or even unofficial response.

That’s a very interesting policy question which we should bring to the attention of @lestaff . (Thanks for the flag, @motoko .) If anyone isn’t familiar with the EICAR test mechanism, see [image] EICAR test file The EICAR Anti-Virus Test File or EICAR test file is a computer file that was…

Hi all, Many thanks for the responses - first post, but obviously a great community! @stevenzhu I agree with all points. Happy to use a commercial CA too - I’m assuming this eventuality and I’m sure they won’t care (which it is good that LS does some basic checks!). But the inability to bypass evi…

Very interesting case @aushack ! Thanks for bringing it to our attention. Presently there is no mechanism in Boulder (the Let’s Encrypt CA software) to exempt domains from the Google Safebrowsing check. I think the bar to justify building this into Boulder will be pretty high. We’re generally nervous…

[image] cpu: I’ll discuss this case with the other Boulder engineers this afternoon & see what other folks think. The consensus here was that this should be addressed by GSB. If that doesn't work out I think your best path forward will be acquiring a certificate from a CA that has the staffin…

Hi @cpu , Thanks for that. Yes I can see your point. I originally opposed the GSB block via the automated form with details which was rejected 24-48 hours later. In that case I suspect they maybe didn’t read / understand so maintained the block. I’m sure the GSB code just checks if the URLs are sti…

@cpu bump? Is there a DM/PM so we can ask someone from Google Safe Browsing about it?

Hi @aushack , apologies for the delay in response. I’ve been out of town for the past few days. I’m going to see if I have a contact I can reach out to and will follow-up with you via DM. Is it safe to assume you haven’t heard anything back from the contact form you filled out previously?

Bump. Many thanks, sorry about the delay. I shall look into this and report back, should it be of value to others.

Malware test site: Considered an unsafe domain by a third-party API

Issuance Policy

cpu January 10, 2019, 6:41pm 14

@aushack I think this recent change will resolve the problem that kept you from being able to use Let’s Encrypt: Let’s Encrypt No Longer Checking Google Safe Browsing

Topic		Replies	Views
Misused certificates Issuance Policy	47	13366	September 7, 2023
Certbot Not Able to Issue Certificate - Site marked as unsafe Google Safe Browsing Help	28	9124	May 1, 2017
Verify error:"error":{"type":"urn:acme:error:unauthorized","detail":" Help	8	1865	May 2, 2018
The CA's Role in Fighting Phishing and Malware Issuance Policy	106	25828	November 12, 2019
Domain Safety Check Services - Google Safe Browsing Server	1	1236	October 4, 2017

Malware test site: Considered an unsafe domain by a third-party API

Related topics