3 ms·
Certificate pinning helps remedy this, to an extent. Anyway, it's not just Cloudflare that can do this.
by indigo945 6y ago
Certificate pinning helps remedy this, to an extent. Anyway, it's not just Cloudflare that can do this.
- apeace 6y agoAlso Certificate Transparency https://en.wikipedia.org/wiki/Certificate_Transparency https://en.wikipedia.org/wiki/Certificate_Transparency
- yencabulator 6y agoWith Letsencrypt etc, isn't it still true that everyone who can BGP hijack traffic can get a TLS cert for that domain? https://community.letsencrypt.org/t/using-bgp-to-acquire-bogus-tls-certificates/38627 https://community.letsencrypt.org/t/using-bgp-to-acquire-bog...