Comment by rvnx
6 years ago
https://cs.chromium.org/chromium/src/components/google/core/...
Just thinking out loud.
What happens, let's say, if someone malicious buys youtube.vg and puts a SSL certificate on it ? Will they be able to collect the ID ?
I guess so ?
Yes, but they would also need a valid TLS certificate?
A country's government could also take over the TLD and grab its traffic overnight.