NHacker Next
- new
- past
- show
- ask
- show
- jobs
- submit
login
eMudhra are now blocking access to their certificate revocation list URLs, so a MITM attacker using their certs with private key 4 keep working
It's almost like this is intentional. Weird.
Seems to me more like they've deployed some default WAF in front of their web properties, without considering the specific needs for the CRL endpoints.
The post indicates its a misconfigured WAF that's blocking automated tools/potential scrapers, not an overall block.
Rendered at 15:34:30 GMT+0000 (Coordinated Universal Time) with Vercel.