eMudhra are now blocking access to their certificate revocation list(bugzilla.mozilla.org)
16 pointsby deadliftdouche7 hours ago2 comments
  • deadliftdouche7 hours ago
    eMudhra are now blocking access to their certificate revocation list URLs, so a MITM attacker using their certs with private key 4 keep working
  • topham7 hours ago
    It's almost like this is intentional. Weird.
    • rmccue7 hours ago
      Seems to me more like they've deployed some default WAF in front of their web properties, without considering the specific needs for the CRL endpoints.