Private Diffie/Helman Tokens
Private Diffie/Helman Tokens
Posted Dec 6, 2024 13:18 UTC (Fri) by dskoll (subscriber, #1630)In reply to: Private Diffie/Helman Tokens by epa
Parent article: Let's Encrypt sets date for ending OCSP support
... at least from my view of the network
I think that's the key attack that SSL certificates are supposed to prevent. LetsEncrypt goes to some lengths to avoid being misled when it verifies domain ownership. While not perfect, the measures make it a bit harder for attackers to use DNS or BGP spoofing attacks against LetsEncrypt.