4 ms·
Said adversaries could just use take images of the VMs (which they probably do anyway for backups) and extract the cert from them. Unfortunately, it seems this
by supriyo-biswas 3y ago
Said adversaries could just use take images of the VMs (which they probably do anyway for backups) and extract the cert from them.
Unfortunately, it seems this topic has attracted the attention of many who keep insisting that it must be Let's Encrypt at fault here.
- quags 3y agoYes this would be easy and I would expect on most providers it could be done using a snapshot with out affecting the live system for a basic system install unless the file system was encrypted.
- jojobas 3y agoYou can take memory snapshot just as easily as disk ones. The cert has to be in memory in an unencrypted form somewhere.