NewsLab
Oct 27 19:40 UTC

eMudhra are now blocking access to their certificate revocation list (bugzilla.mozilla.org)

16 points|by deadliftdouche||3 comments|Read full story on bugzilla.mozilla.org

Comments (3)

3 shown
  1. 1. deadliftdouche||context
    eMudhra are now blocking access to their certificate revocation list URLs, so a MITM attacker using their certs with private key 4 keep working
  2. 2. topham||context
    It's almost like this is intentional. Weird.
  3. 3. rmccue||context
    Seems to me more like they've deployed some default WAF in front of their web properties, without considering the specific needs for the CRL endpoints.