3 ms·

Hetzner/Linode were MITMing their client(jabber.ru): https://notes.valdikss.org.ru/jabber.ru-mitm/ https://notes.valdikss.org.ru/jabber.ru-mitm/

• troupo 9mo ago
  Was it Hetzner, or was it an attacker hosting on Hetzner/Linode?
  • direwolf20 9mo ago
    It was the German equivalent of the NSA, with the German equivalent of a National Security Letter, sent to Hetzner to force them to intercept this customer's traffic. The same thing happens in the USA.
    • troupo 9mo ago
      Sigh Time to setup my own dedicated servers.
      • direwolf20 9mo ago
        The German NSA seemed unable to access the server as they only intercepted the traffic. They got a TLS certificate from Let's Encrypt by intercepting traffic. If the app had used public key pinning, and the server had full disk encryption, this wouldn't have been enough for a compromise.