A small selection from a long list of unqualified domains to which SSL certificates have been issued (WEB HOST INDUSTRY REVIEW) — In a report issued this week, online watchdog group the Electronic Frontier Foundation said that certificate authorities are issuing SSL certificates for unqualified domains in large numbers, a practice that the report’s author Chris Palmer says could impact the integrity of the whole SSL system, and puts Internet users at increased risk of attack. Certificate authorities, says Palmer, are only supposed to issue certificates for public names – that is, for fully-qualified domains that reference a specific machine. Palmer’s research into data in the EFF’s “SSL Observatory” uncovered large numbers of certificates signed by CAs for domains typically used as internal-network shorthand, such as “mail,” “wiki,” or “intranet.” “In the Observatory we have discovered many examples of CA-signed certificates unqualified domain names,” he writes.