News for hackers. Stuff that matters.
Re:Malicious attack on Wikipedia – what we know and what we’... by cramforce on Sunday September 08, 2019 @10:06AM (#20910616)
The MITM can be avoided by using Signed Exchanges. https://developers.google.com/web/updates/2018/11/signed-exc...
Re:Malicious attack on Wikipedia – what we know and what we’... by SahAssar on Sunday September 08, 2019 @02:04PM (#20912183)
That only works for static content, right?
Re:Malicious attack on Wikipedia – what we know and what we’... by cramforce on Saturday September 14, 2019 @11:29PM (#20975401)
No, they can be created on the fly. That basically makes it a TLS signing Oracle.