3 ms·
One could either spam DNS responses at the LE clients or push bogus BGP routes towards LE, and quite probably other things. And you don’t even need LE’s help to
by geocar 4y ago
One could either spam DNS responses at the LE clients or push bogus BGP routes towards LE, and quite probably other things. And you don’t even need LE’s help to do any of this.
- lathiat 4y agoWhile these kinds of attacks are certainly possible, Let's Encrypt is not blind to them and has mitigations specifically for BGP hijacking for example: https://letsencrypt.org/2020/02/19/multi-perspective-validation.html https://letsencrypt.org/2020/02/19/multi-perspective-validat...