3 ms·
A CISA article on wildcard security risks. Some of this is in part from common misimplementations (e.g.reusing private keys across servers), but not all of it.
by thedougd 2y ago
A CISA article on wildcard security risks. Some of this is in part from common misimplementations (e.g.reusing private keys across servers), but not all of it.
https://www.cisa.gov/news-events/alerts/2021/10/08/nsa-releases-guidance-avoiding-dangers-wildcard-tls-certificates-and https://www.cisa.gov/news-events/alerts/2021/10/08/nsa-relea...
Direct:
https://media.defense.gov/2021/Oct/07/2002869955/-1/-1/0/CSI_AVOID%20DANGERS%20OF%20WILDCARD%20TLS%20CERTIFICATES%20AND%20THE%20ALPACA%20TECHNIQUE_211007.PDF https://media.defense.gov/2021/Oct/07/2002869955/-1/-1/0/CSI...