Buy a domain, get a cert, sell it: lcamtuf flags a free MITM path
OwariDa · x · 2026-09-15
Security researcher lcamtuf sketched a four-step trick that exposes a real risk: register a domain, obtain an HTTPS certificate for it, then sell the domain — the old certificate may keep working, handing the new owner a free man-in-the-middle channel. The takeaway: HTTPS alone doesn't guarantee you're talking to the current domain holder.
More from Fun
- 'A simulated Uber Eats delivery doesn't make anyone full' — the John Searle AI meme — dioscuri · 2026-09-15
- AI psychosis is self-reinforcing, and benhylak says those jokes are cries for reassurance — teodorio · 2026-09-15
- Cassini's Saturn mission ended 9 years ago: planned for 3, lasted 13 — AIFlow_ML · 2026-09-15
- "Future computers only run ChatGPT" meme meets the token-spewing punchline — teodorio · 2026-09-15
- 'Learned to Read Minds, Walked Into a University, Instantly Regretted It' — prof_kamilov · 2026-09-15
- Kid spends weeks turning imagination into AI short film 'The City That Listened' — Acceptable-Meal-1434 · 2026-09-15