2 ms·
Even just using HTTPS instead of insecure HTTP would prevent this type of attack. (I see no indication that the attackers obtained forged TLS certificates, and
by comex 2y ago
Even just using HTTPS instead of insecure HTTP would prevent this type of attack.
(I see no indication that the attackers obtained forged TLS certificates, and compromising a client-side ISP wouldn’t be enough to get one.)
- dsburkart 2y agoWow, somehow I missed the line about “insecure http update method”… crazy