Re:House Oversight Committee Report on Equifax Breach [pdf]
by rconti on Monday December 10, 2018 @06:50PM
(#18652186)
It's entirely possible they were monitoring cert validity, and that monitoring itself failed due to the expired certs :)
We don't really know what the certs were used for (eg, whether it was needed to decrypt traffic), or just as part of the reporting... And yes, the team is responsible for keeping them valid, but... this isn't the first time that cert expiration "broke" something and left us worse off than with no SSL at all.
We don't really know what the certs were used for (eg, whether it was needed to decrypt traffic), or just as part of the reporting... And yes, the team is responsible for keeping them valid, but... this isn't the first time that cert expiration "broke" something and left us worse off than with no SSL at all.