ACME TLS-SNI-01 issuing Let's Encrypt SSL-certs for any domain using shared hosting - Frans Rosén

ACME TLS-SNI-01 issuing Let's Encrypt SSL-certs for any domain using shared hosting – Frans Rosén



Frans Rosén found a method to issue SSL-certificates to domains he didn’t own, breaking one of the internet’s most important security foundations. He exploited some shared hosting infrastructures to obtain certificates for domains he did not control, by making use of the ACME TLS-SNI-01 challenge type.

NDC Conferences

One thought on “ACME TLS-SNI-01 issuing Let's Encrypt SSL-certs for any domain using shared hosting – Frans Rosén

Leave a Reply

Your email address will not be published. Required fields are marked *