4 ms·
TLS isn't worth much if someone hijacks your zone and obtains X.509 certificates for your services. A smart attacker with enough resources could even re-encrypt
by crest 3y ago
TLS isn't worth much if someone hijacks your zone and obtains X.509 certificates for your services. A smart attacker with enough resources could even re-encrypt the intercepted traffic and control enough addresses to avoid running into per prefix resource limits or other obvious failure modes.
- api 3y agoHow does letsencrypt guard against this?
- jaas 3y agoThanks in large part to our research partnership with the group at Princeton CITP, Let's Encrypt has deployed a system we call multi-perspective validation. We validate domain control from multiple network perspectives so that an attacker would have to pull off several simultaneously successful BGP attacks in order to hijack our validation. It's not perfect but it makes it very difficult to do. There are other improvements coming that will further improve effectiveness. https://www.cs.princeton.edu/~jrex/papers/multiva20.pdf https://www.cs.princeton.edu/~jrex/papers/multiva20.pdf I believe the Google Trust Services CA recently announced that they have started doing this as well.