digicatM to blueteamsecEnglish · 8 days agoUsing ADCS to Attack HTTPS-Enabled WSUS Clientsblog.digitrace.deexternal-linkmessage-square1linkfedilinkarrow-up17arrow-down11
arrow-up16arrow-down1external-linkUsing ADCS to Attack HTTPS-Enabled WSUS Clientsblog.digitrace.dedigicatM to blueteamsecEnglish · 8 days agomessage-square1linkfedilink
minus-squarefaebudolinkfedilinkEnglisharrow-up2·8 days agoOh wow. TL;DR They found out that, if you can do mitm on a TLS connection with valid certificates, you can impersonate the TLS secured service! I don’t get from the article what the novelty is.
Oh wow. TL;DR They found out that, if you can do mitm on a TLS connection with valid certificates, you can impersonate the TLS secured service! I don’t get from the article what the novelty is.