Well, at least it seems that they're not (ab)using it for now.

```
$ dig letsencrypt.cn
; <<>> DiG 9.11.0-P1 <<>> letsencrypt.cn
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 63776
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;letsencrypt.cn.                        IN      A

;; ANSWER SECTION:
letsencrypt.cn.         3481    IN      A       211.151.125.110

;; Query time: 0 msec
;; SERVER: [scrambled]
;; WHEN: Sun Dec 18 15:30:24 JST 2016
;; MSG SIZE  rcvd: 59

$ curl letsencrypt.cn
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 
4.01//EN""http://www.w3.org/TR/html4/strict.dtd";>
<HTML><HEAD><TITLE>Service Unavailable</TITLE>
<META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD>
<BODY><h2>Service Unavailable</h2>
<hr><p>HTTP Error 503. The service is unavailable.</p>
</BODY></HTML>
```
_______________________________________________
dev-security-policy mailing list
[email protected]
https://lists.mozilla.org/listinfo/dev-security-policy

Reply via email to