3 ms·
Not only that, but should verify CA… the _exact_ ca. If you’re bringing in external information into a system, the source needs to be cryptographically authenti
by exabrial 4y ago
Not only that, but should verify CA… the _exact_ ca. If you’re bringing in external information into a system, the source needs to be cryptographically authenticated.
Do you store identities in an external system? (LDAP for example) If you don’t verify an exact ca (or tls key), it just means you system is open to a dns rebind attack.