3 ms·
Correction: that you can control the IP space advertised to Let's Encrypt. A BGP exploit would result in getting valid certs for someone else's domain/host. It'
by peterwwillis 9y ago
Correction: that you can control the IP space advertised to Let's Encrypt. A BGP exploit would result in getting valid certs for someone else's domain/host. It's almost trivial to exploit BGP, which is why PKI is so important... so it should actually be incredibly difficult to get a cert.
- discreditable 9y agoIf someone is hijacking BGP to MITM the world, how are the old methods any better?
- snuxoll 9y agoIf you could hijack BGP you could just as easily inject routes to intercept DNS requests as well.