Method for domain control validation
View Patent ↗A system and method for domain control validation is presented. At a certificate authority a request is received. The request includes a certificate signing request and a first Internet protocol address. The certificate signing request identifies a domain and a certificate. A second Internet protocol address for the domain is retrieved from a domain name system. When the first Internet protocol address is the same as the second Internet protocol address, the certificate is signed, and the signed certificate is transmitted to a requester of the request. When the first Internet protocol address is not the same as the second Internet protocol address, the certificate signing request is rejected.
1. A method, comprising:
receiving, at a certificate authority from a web hosting provider, a request including a certificate signing request and a first plurality of Internet protocol addresses of a hosted account of a subscriber of the web hosting provider, the certificate signing request identifying a domain associated with the subscriber and a certificate;
retrieving a second plurality of Internet protocol addresses for the domain from a domain name system;
when a first one of the first plurality of Internet protocol addresses is the same as a first one of the second plurality of Internet protocol addresses:
signing the certificate to generate a signed certificate, and
transmitting the signed certificate to a requester of the request; and
when each one of the first plurality of Internet protocol addresses are different from each one of the second plurality of Internet protocol addresses:
rejecting the certificate signing request; and
initiating an alternative method for performing domain control validation for the domain.
2. The method of claim 1 , wherein the certificate authority and the web hosting provider have a pre-established trusted relationship.
3. The method of claim 1 , wherein the certificate authority and the web hosting provider are the same entity.
4. The method of claim 1 , wherein the certificate authority and the web hosting provider are different entities.
5. The method of claim 1 , wherein rejecting the certificate signing request includes transmitting a notification to the web hosting provider.