System for domain control validation

摘要

A system and method for domain control validation is presented. At a certificate authority a request is received. The request includes a certificate signing request and a first Internet protocol address. The certificate signing request identifies a domain and a certificate. A second Internet protocol address for the domain is retrieved from a domain name system. When the first Internet protocol address is the same as the second Internet protocol address, the certificate is signed, and the signed certificate is transmitted to a requester of the request. When the first Internet protocol address is not the same as the second Internet protocol address, the certificate signing request is rejected.

主权项

1. A system, comprising:
at least one server computer having a processor and being configured to:
receive a request including a certificate signing request and a first Internet protocol address, the certificate signing request identifying a domain and a certificate;retrieve a second Internet protocol address for the domain from a domain name system;when the first Internet protocol address is the same as the second Internet protocol address:
sign the certificate, andtransmit the signed certificate to a requester of the request; andwhen the first Internet protocol address is not the same as the second Internet protocol address, reject the certificate signing request.