4 ms·

Apparently they had a web front end where customers could request private keys... https://twitter.com/GossiTheDog/status/968834765888589825 https://twitter.com

• regecks 9y ago
  Had? Have. https://www.trustico.com.au/ssltools/create/csr-pem/create-a-new-csr-instantly.php https://www.trustico.com.au/ssltools/create/csr-pem/create-a... Generated server-side. http://termbin.com/eu4c http://termbin.com/eu4c
  • piracykills 9y ago
    Yeah, that's actually surprisingly common, I remember working with a few before that did it. StartSSL and a Comodo reseller of some sort I think. I'm done with these companies, Let's Encrypt seems to be the only people doing it right.
• stevekemp 9y ago
  And execute arbitrary commands as root: https://twitter.com/Manawyrm/status/969230542578348033 https://twitter.com/Manawyrm/status/969230542578348033