On 2016-09-02 04:22, Richard Wang wrote:
For https://crt.sh/?id=29884704 , he finished the website control validation.
We and Alibaba are investigating why he can do the website control validation.
The is the log, but we can't expose more now since it is related to Alibaba.
2016-06-23 01:34:39: WoSign validation system received domain "alicdn.com" website
control request,the url is "http://alicdn.com/alicdn.com.html", v_random is
2e3baabe989fad9f143517796ed4941c13e7177b, Validation system used Get method, 400 error, then change
to use POST method, success.
I'm wondering why you try to use POST, and what you could be posting there.
Kurt
_______________________________________________
dev-security-policy mailing list
[email protected]
https://lists.mozilla.org/listinfo/dev-security-policy