ACME TLS-SNI-01 issuing Let's Encrypt SSL-certs for any domain using shared hosting – Frans Rosén

Frans Rosén found a method to issue SSL-certificates to domains he didn’t own, breaking one of the internet’s most important security foundations. He exploited some shared hosting infrastructures to obtain certificates for domains he did not control, by making use of the ACME TLS-SNI-01 challenge type.

NDC Conferences