4 ms·
My guess is that they were using private certificates to read encrypted data, without which they couldn't inspect their traffic.
by david_shaw 8y ago
My guess is that they were using private certificates to read encrypted data, without which they couldn't inspect their traffic.
- jacquesm 8y agoThe exfiltration attempt would have likely been triggered on volume alone. Possibly it was simply a service that could not longer connect due to a lapsed cert trying to raise the alarm.