News for hackers. Stuff that matters.

A comment on I exploited TLS-SNI-01 issuing Let's Encrypt SSL-certs for any domain (2018). Parent comment

Re:I exploited TLS-SNI-01 issuing Let's Encrypt SSL-certs fo... by dfc on Tuesday January 29, 2019 @09:50PM (#19032200)
A friend of mine mentioned they got that email but we're not sure what specific cert it was for. I told him he must have missed that part of the email. Is there any chance you are sending those emails out without specifically identifying what certificate the email is for?
[ Parent | on HN ]
Re:I exploited TLS-SNI-01 issuing Let's Encrypt SSL-certs fo... by honopu on Tuesday January 29, 2019 @11:22PM (#19032633)
They resent the emails yesterday, or at least started to, which included the domains. I asked about this in the forums and they were pretty quick to agree it was a good idea.
[ Parent | on HN ]