News for hackers. Stuff that matters.

A comment on Webmin 1.890 Exploit – What Happened?.

Re:Webmin 1.890 Exploit – What Happened? by rhinoceraptor on Monday August 26, 2019 @02:36PM (#20802449)
And, of course their site is HTTP only, including the path for their PGP signing key (!!!).

They do have a valid Let's Encrypt cert, but apparently it's only configured for the `download` subdomain.

[ Parent | on HN ]

There are no comments on this comment yet.