Oof. Reportedly, if you got a certificate from SSL.com by putting “example[@]gmail.com” at _validation-contactemail.example.com, they would add gmail.com (!!!) to your verified domains.

A good reminder to use the CAA record, and to sign up for CT monitoring (e.g. Cert Spotter).

bugzilla.mozilla.org/show_bug.

0

If you have a fediverse account, you can quote this note from your own instance. Search https://abyssdomain.expert/users/filippo/statuses/114364163369923155 on your instance and quote it. (Note that quoting is not supported in Mastodon.)