3 ms·

How often are you reviewing the CT logs for your domains? I posit that's rare.

• immibis 2y ago
  BTW this attack actually happened with jabber.ru - "law" "enforcement" physically intercepted their Ethernet port, then they got to use their IP address and could issue new certificates.
  • debatem1 2y ago
    Do you happen to have a link or any other information about this?
    • immibis 2y ago
      https://notes.valdikss.org.ru/jabber.ru-mitm/ https://notes.valdikss.org.ru/jabber.ru-mitm/ https://news.ycombinator.com/item?id=37961166 https://news.ycombinator.com/item?id=37961166
  • 8organicbits 2y ago
    Rare was intended to refer to "the monitoring of CT logs". The CA system doesn't protect against an adversary who has physical control of your system.