Care to explain how you think this issue is even remotely related to the grey market for Cisco products? I'm having trouble trying to come up with any link bet

Care to explain how you think this issue is even remotely related to the grey market for Cisco products? I'm having trouble trying to come up with any link between the two. --- In my opinion, with the exception of perhaps very small networks, no one who's "doing it right" should really be affected by this issue. I can kinda maybe understand folks using self-signed certificates for VPNs but, really, if you're doing much at all with certificates you should either be running your own internal PKI and/or getting certificates by somewhere else. My previous employer had literally hundreds of devices using their own self-signed certificates (for device management) on them. Many of them were the "default" certificates that shipped on the devices, so it was the same certificate shared across hundreds of devices. As someone who gives a shit about security, that drove me absolutely nuts but no one else gave a damn. (Even worse, since nearly all of these devices used the same credentials, you'd only need to MITM one of them in order to "pwn" damn near everything on the entire network!)