News for hackers. Stuff that matters.

A comment on I exploited TLS-SNI-01 issuing Let's Encrypt SSL-certs for any domain (2018). Parent comment

Re:I exploited TLS-SNI-01 issuing Let's Encrypt SSL-certs fo... by annonch on Tuesday January 29, 2019 @01:06PM (#19028448)
Hmm you may be right in general but this post is about a vulnerability in a specification adopted by LE not a standard designed by LE.
[ Parent | on HN ]
Re:I exploited TLS-SNI-01 issuing Let's Encrypt SSL-certs fo... by schoen on Tuesday January 29, 2019 @01:13PM (#19028514)
TLS-SNI-01 and ACME were both originally invented by Let's Encrypt, and have still not (quite) been standardized by IETF.
[ Parent | on HN ]