4 ms·
If you can inject arbitrary malicious routes, you can make ACME requests for a new cert.
by dsr_ 6mo ago
If you can inject arbitrary malicious routes, you can make ACME requests for a new cert.
- ThomasGlanzmann 6mo agoYou can mitigate this with DNSSEC, CAA records and account pinning. See: https://www.devever.net/~hl/xmpp-incident https://www.devever.net/~hl/xmpp-incident