←back to thread

Mitigating the Hetzner/Linode XMPP.ru MitM interception incident

(www.devever.net)
341 points hlandau | 1 comments | 20 Oct 23 20:31 UTC | HN request time: 0.001s | source
Show context
tedunangst ◴[20 Oct 23 23:00 UTC] No.37962435[source]▶
Run your own CA and choose your roots carefully didn't make the cut.
replies(1): >>37962872 #
fanf2 ◴[21 Oct 23 00:10 UTC] No.37962872[source]▶
A bit difficult when providing services to third parties who can use any client software :-/
replies(2): >>37963028 #>>37963056 #
1. tedunangst ◴[21 Oct 23 00:35 UTC] No.37963028[source]▶
That's actually probably easier than getting a browser to work with a forbidden cert, how dare you.