3 ms·

Can you imagine the damage done to a CDN if the attacker would supply extremely long Expire/Caching/key-pinning headers? All clients visiting the malicious serv

by 0x0 9y ago

Can you imagine the damage done to a CDN if the attacker would supply extremely long Expire/Caching/key-pinning headers? All clients visiting the malicious server would be cache poisoned for a loooong time.

AgentME 9y ago
For extra fun, the attacker could send HTTP 301 redirects from the (temporarily) stolen domain to a different domain. Browsers don't forget those.
- ceejayoz 9y ago
  Y'all are terrifying me.
- esnard 9y ago
  Clearing the cache actually clears cached redirections.
  - AgentME 9y ago
    Good luck to any victim site instructing the entirety of their userbase to do that. Especially when the users can't access the site to begin with.
user5994461 9y ago
Cache can be cleared and they are usually rechecked from time to time. What's really fun is the HSTS strict transport policy header + certificate key pinning. That cannot be cleared. None of the users who open it will ever be able to open the site again.