3 ms·
This honestly i never even thought about this, i mean sure Cloudflare COULD MITM them, but if the dns is already running through cloudflare, they could just rei
by cchance 2y ago
This honestly i never even thought about this, i mean sure Cloudflare COULD MITM them, but if the dns is already running through cloudflare, they could just reissue a new DNS challenged LetsEncrypt cert, they don't need your old cert to reissue a new one if they're the MITM and DNS hoster lol.
Bitching about a cert not being revoked, is kinda silly since the guys running like 50% of the internet could easily just reissue a new letsencrypt cert to replace the one you "revoked" if they were mischeveous.
- tempay 2y ago> could easily just reissue a new letsencrypt cert This would be visible in certificate transparency logs. MITM with the certificate they already have would be impossible to observe unless you had access to the client that was being attacked.