News for hackers. Stuff that matters.

A comment on Let's Encrypt tls-sni-01 disabled due to credible vulnerability report. Parent comment

Re:Let's Encrypt tls-sni-01 disabled due to credible vulnera... by niftich on Wednesday January 10, 2018 @01:26AM (#16112930)
Thanks for the update and good work. Are you able to share and/or clarify whether the TLS-SNI-02 challenge is affected as well, in addition to TLS-SNI-01 which is currently Production on LE?
[ Parent | on HN ]
Re:Let's Encrypt tls-sni-01 disabled due to credible vulnera... by jaas on Wednesday January 10, 2018 @02:00AM (#16113037)
Haven't put much thought into -02 since nobody actually runs it in production but I suspect the same issue applies.
[ Parent | on HN ]