On 2016-09-02 04:22, Richard Wang wrote:
For https://crt.sh/?id=29884704 , he finished the website control validation.

We and Alibaba are investigating why he can do the website control validation.

The is the log, but we can't expose more now since it is related to Alibaba.

2016-06-23 01:34:39:  WoSign validation system received domain "alicdn.com" website 
control request,the url is "http://alicdn.com/alicdn.com.html";, v_random is 
2e3baabe989fad9f143517796ed4941c13e7177b, Validation system used Get method, 400 error, then change 
to use POST method, success.

I'm wondering why you try to use POST, and what you could be posting there.


Kurt

_______________________________________________
dev-security-policy mailing list
[email protected]
https://lists.mozilla.org/listinfo/dev-security-policy

Reply via email to