1. 24
    Let's Encrypt tls-sni challenge has been disabled due to strong credibility of a vulnerability security letsencrypt.status.io
    augustocallejas avatar via augustocallejas 7 months ago | cached | 5 comments

  1.  

  2. 7
    skade avatar skade 7 months ago | link

    Detailed writeup (taken from the linked page) here: https://community.letsencrypt.org/t/2018-01-09-issue-with-tls-sni-01-and-shared-hosting-infrastructure/49996

    1. 2
      strugee avatar strugee edited 7 months ago | link

      Is this the Internet equivalent of a bomb threat?

      1. 7
        skade avatar skade 7 months ago | link

        I don’t think so. In my reading, it is that Let’s Encrypt basically did the right thing: mitigate (by shutting down) and inform quickly, provide a detailed writeup ASAP (which they did, 7 hours later).

        1. 1
          strugee avatar strugee 7 months ago | link

          Heh, I agree. I was just making a (bad) joke :P

          1. 1
            skade avatar skade 7 months ago | link

            Too close to home… too close to home ;).