4 ms·
But she mentioned: 1) it isn't in DNS only /etc/hosts and 2) they are making a connection to it. So they'd need to get the IP address to connect to from somewhe
by A1kmm 8mo ago
But she mentioned: 1) it isn't in DNS only /etc/hosts and 2) they are making a connection to it. So they'd need to get the IP address to connect to from somewhere as well.
- bardsore 8mo agoUnless she hosts her own cert authority or is using a self-signed cert, the wildcard cert she mentions is visible to the public on sites such as https://crt.sh/ https://crt.sh/.
- heipei 8mo agoYes, the wildcard cert, but not the actual hostname under that wildcard.
- jeroenhd 8mo agoFrom the article: > You're able to see this because you set up a wildcard DNS entry for the whole ".nothing-special.whatever.example.com" space pointing at a machine you control just in case something leaks. And, well, something did* leak. They don't need the IP address itself, it sounds like they're not even connecting to the same host.