←back to thread

Getting ready to issue IP address certificates

(community.letsencrypt.org)
314 points Bogdanp | 1 comments | 25 Jun 25 16:21 UTC | HN request time: 0.931s | source
Show context
richm44 ◴[25 Jun 25 17:40 UTC] No.44379904[source]▶
Time for me to dust off CVE-2010-3170 again? :-)
replies(1): >>44381602 #
1. NicolaiS ◴[25 Jun 25 20:38 UTC] No.44381602[source]▶
I guess a bunch of "roll your own X.509 validation"-logic will have that bug, but to exploit it you need a misbehaving CA to issue you such a cert (i.e. low likelihood)