News for hackers. Stuff that matters.

A comment on Shutting down our public encrypted DNS. Parent comment

Re:Shutting down our public encrypted DNS by pocksuppet on Friday September 04, 2026 @11:02PM (#49572698)
Are you sure? Someone broke into a Hetzner data center and a Linode one, physically intercepted the Ethernet cables for jabber.ru, and got certificates signed on their behalf.

https://notes.valdikss.org.ru/jabber.ru-mitm/

https://news.ycombinator.com/item?id=37961166

[ Parent | on HN ]
Re:Shutting down our public encrypted DNS by PinkSheep on Saturday September 05, 2026 @09:58AM (#49576563)
dear sockpuppet =) I think the above commenter meant illegal physical access. The jabber.ru MitM situation was likely carried out by a cybercrime unit of the German police forces with a court order... and this is the adversary most people forget about.

Lesson to learn: Let's Encrypt does not protect against MitM by a state-level actor, unless you take precautions. *let's assume network admins won't MitM your server for personal vengeance reasons

[ Parent | on HN ]
Re:Shutting down our public encrypted DNS by hulitu on Sunday September 06, 2026 @02:50PM (#49589583)
> Lesson to learn: Let's Encrypt does not protect against MitM

But S in https stands for secure, or ? /s

[ Parent | on HN ]