35 ms·
This is what TLS certificates solve. They make sure the other end of the IP connection has the name you expect it to have.
by jwatte 6y ago
This is what TLS certificates solve. They make sure the other end of the IP connection has the name you expect it to have.
- erpellan 6y agoIf they've hijacked a subdomain, they can submit it to LetsEncrypt and get a cert. LetsEncrypt checks that you control a domain by asking you to serve some data from it. The domain is already hijacked so from LetsEncrypt's perspective it's yours.