[lca2018-chat] And now for something completely different, tls-sni and LetsEncrypt

Rob Thomas xrobau at gmail.com
Wed Jan 10 14:33:39 AEDT 2018


I've always disliked the use of tls-sni for LE validation, as it's given me
this gut-feeling of being hacky.

LE have just disabled it, because ..

*[Investigating] *The tls-sni challenge has been disabled due to strong
credibility of a vulnerability report.

https://letsencrypt.status.io/pages/incident/55957a99e800baa4470002da/5a55777ed9a9c1024c00b241

--Rob
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.lca2018.linux.org.au/pipermail/lca2018-chat/attachments/20180110/db8f34c0/attachment.html>


More information about the lca2018-chat mailing list