Re:Let's Encrypt tls-sni-01 disabled due to credible vulnera...
by tialaramex on Wednesday January 10, 2018 @05:09AM
(#16113798)
It prevented _uninformed_ rumours :D
Almost all the speculation was about the exact scenario that Let's Encrypt have subsequently confirmed - you can trick some bulk hosting or CDN providers into letting you (a customer) answer a challenge for one of their other customers' systems.
Almost all the speculation was about the exact scenario that Let's Encrypt have subsequently confirmed - you can trick some bulk hosting or CDN providers into letting you (a customer) answer a challenge for one of their other customers' systems.