News for hackers. Stuff that matters.

A comment on Let's Encrypt tls-sni-01 disabled due to credible vulnerability report. Parent comment

Re:Let's Encrypt tls-sni-01 disabled due to credible vulnera... by discreditable on Wednesday January 10, 2018 @08:02AM (#16114598)
I don't think CF is affected because TLS-SNI-01 has never worked for cf-proxied sites (I've tried). CF doesn't allow clients to use invalid certificates for domains they don't own, which is key for the tls-sni-01 process.
[ Parent | on HN ]

There are no comments on this comment yet.