3 ms·
The MITM observation isn't any more dangerous than Trust on First Use. The attacker would have to identify you as a target and set up their MITM before you got
by hughw 3y ago
The MITM observation isn't any more dangerous than Trust on First Use. The attacker would have to identify you as a target and set up their MITM before you got around to setting up your own cert. Sort of like an attacker compromising your SSH server before the first time you got around to connecting a client and trusting the key.
- super256 3y agoYes, and this point is kinda nonsense since communication to letsencrypt‘s api is via https, and you trust the LE root since their cert is included in every new mainstream OS which got released after, i don’t know, 2019?