News for hackers. Stuff that matters.

A comment on I exploited TLS-SNI-01 issuing Let's Encrypt SSL-certs for any domain (2018). Parent comment

Re:I exploited TLS-SNI-01 issuing Let's Encrypt SSL-certs fo... by qu4z-2 on Tuesday January 29, 2019 @08:27PM (#19031725)
I'm fairly sure you can also just get the client to request http://example.com:443/. The cookies get sent before the server goes "Wait, what?".
[ Parent | on HN ]
Re:I exploited TLS-SNI-01 issuing Let's Encrypt SSL-certs fo... by schoen on Tuesday January 29, 2019 @10:11PM (#19032303)
This thread seems to agree with you:

https://stackoverflow.com/questions/1612177/are-http-cookies...

I just tested this and I was able to confirm your suggestion with Firefox, watching with a packet sniffer while connecting to my own site with http://example.com:443/ after previously setting a cookie over https://example.com/. The cookie was clearly visible in the packet log.

[ Parent | on HN ]