News for hackers. Stuff that matters.

A comment on GlobalSign: RSA-1024 leaf certificate issued after 2013-12-31. Parent comment

Re:GlobalSign: RSA-1024 leaf certificate issued after 2013-1... by mariusmarais on Wednesday February 10, 2021 @01:12AM (#26086148)
Seems like someone finally got to Inbox Zero.

But terrifying at the same time. I wonder how many valuable targets might have had outstanding validations from 10 years ago, or even 3 years ago.

[ Parent | on HN ]
Re:GlobalSign: RSA-1024 leaf certificate issued after 2013-1... by FDSGSG on Thursday February 11, 2021 @04:43PM (#26107728)
Not very terrifying. Odds are someone with access to ancient validation links would also be able to perform new validations.
[ Parent | on HN ]
Re:GlobalSign: RSA-1024 leaf certificate issued after 2013-1... by mariusmarais on Wednesday February 17, 2021 @09:37AM (#26166704)
I was thinking about domains that may have transferred recently. We took over a very "nice" domain last year, but obviously not the historic emails.
[ Parent | on HN ]