Off topic: Comodo
James Browning
jamesb.fe80 at gmail.com
Mon Mar 4 23:38:00 UTC 2019
On Mon, Mar 4, 2019, 1:48 PM Gary E. Miller via devel <devel at ntpsec.org>
wrote:
> Yo Matthew!
>
> On Mon, 4 Mar 2019 21:35:14 +0000
> Matthew Selsky <Matthew.Selsky at twosigma.com> wrote:
>
> > On Mon, Mar 04, 2019 at 12:11:07PM -0800, Gary E. Miller via devel
> > wrote:
> >
> > > Given the Comodo mess of last week I expect a lot more people will
> > > want to do pinning next month.
> >
> > Do you have a reference for this mess?
>
>
> Very long NANOG thread:
>
> https://mailman.nanog.org/pipermail/nanog/2019-February/099719.html
TLDR there was an EPP takeover by crackers unknown. Let's Encrypt and
Comodo apparently were fooled into signing bad TLS cert and while Let's
Encrypt is trying to do better Comodo was apparently like meh, what ever.
Spawn ridiculously long thread, DANE. SPF whatever.
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.ntpsec.org/pipermail/devel/attachments/20190304/af60ceb5/attachment-0001.html>
More information about the devel
mailing list