Using the DNS based validation mechanism, why wouldn’t you use the WHOIS information associated with the domain to fill in ownership information? And when you combine this with a DUNS number you can effectively do an EV certificate or even a code signing cert.

Why doesn't Let's Encrypt use WHOIS information for domain validation?

bytecamp November 14, 2017, 11:48am 2

Whois has no standardized format yet and is not available for all tlds.

2 Likes

Topic		Replies	Views
Other CAs using WHOIS for validation? Issuance Tech	3	150	October 12, 2024
Could CAs or browsers usefully do anything to inform users when site ownership changes? Issuance Policy	2	72	October 10, 2024
Question about the certificate authority Issuance Tech	9	254	October 27, 2024
Namecheap Response to Let's Encrypt Issuance Tech	21	35825	March 4, 2018
How do you confirm the person asking for the certificate actually owns the domain? Issuance Tech	22	19553	November 14, 2017