[ Date Index ]
[ Thread Index ]
[ <= Previous by date /
thread ]
[ Next by date /
thread => ]
[LUG]Re: TLS Certs issue
- To: <list@xxxxxxxxxxxxx>
- Subject: [LUG]Re: TLS Certs issue
- From: <giles@xxxxxxxxxxx>
- Date: Wed, 21 Oct 2026 13:38:25 +0100
- Arc-authentication-results: i=1; arc.gem.livemail.co.uk; arc=none; dkim=none
- Arc-message-signature: i=1; a=rsa-sha256; c=relaxed/relaxed; t=1792586306; s=arc-0001; d=arc.gem.livemail.co.uk; h=Message-ID:Date:Subject:In-Reply-To:References:To:From:Cc:Date:From: Subject:Sender; bh=CfzPUm+wlEPFvFH/T4zYV+hFQKthsvlRh1eKifw6Qms=; b=gdbpc9fCT4WA5sNnZrEvvLkjp4P1QWXhY+Guz0TZKR4aI44WrunTXnp227lsRAjOBl IwKoN/azKc7NHGS/uXdH53Rb5PUfkiOHUbkxOdsjLIMqKZrE9sYlJagsNP6aLRGulv9m Mxy6oxrTwOa7u+AlPJJDdoS9VNuc64owmcmQybQqhrMCyE4G+PPa67tkIMMNBUmSxt+I OeHAhouojwJcGMgQV2aoaUibycOOov3ZtQBSUO3zuw19LBTUN+Cct6si3FDgtrFDCcre dz6tcXdMW2eIKyWUA5Dw7dquTby0GJrxt6TYFHamaRKHav/GhbPPe7DYgY9a9GvfwT73 IevA==
- Arc-seal: i=1; a=rsa-sha256; t=1792586306; cv=none; d=arc.gem.livemail.co.uk; s=arc-0001; b=DvrS9Ujce1pEXMiPsF8FVzuaDtwa68AY9Zd2F68amRFB1rlchRFOFudVUP8M6i7Bhn SNRdTxW2RsB0R6NPeEMbQvEBwu1V75rkmv+6vJ3n0rsbF+fx+y7Q2gaUVIZpG2m0tz1g ikMxnY4BiALDBZbCWPHfBYrFdBCeX79gAAd9WtZ4JuwZSJm4WlEueQMMIyjTHgKxlLEA WsISDEJ9Yqbj1EgxhQ1yXeO3kuAx0ER41jdV0KJDB2anLuWch916OTK0rqgfw8SnUbc6 5JfeDmAvFNiOppyjR7lqA9mOxF9G0VFX9KkYZkZ7kvg2+5b3ONZ8oSLS5FzlUjG1EJgW Ra9A==
- Content-language: en-gb
- Delivered-to: dclug@xxxxxxxxxxxxxxxxxxxxx
- Dkim-signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=dcglug.org.uk; s=1792141562; h=Content-Transfer-Encoding:Content-Type: List-Unsubscribe:List-Subscribe:List-Post:List-Owner:List-Help:List-Id: Subject:Reply-To:MIME-Version:Message-ID:Date:In-Reply-To:References:To:From: Sender:Cc:Content-ID:Content-Description:Resent-Date:Resent-From: Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:List-Archive; bh=pFb01uSilQWW6GFi87tB4kEDSsMHaXnZPS6ugy9E7Pk=; b=l+W01myZW7LshNMZMDwjdwjhd1 HDuIS56FlxK7dEXr0I7nx9FmPDG28JDUTOOycygJVzV1GAptU6298VK5/o1yhr0L4WS6JDoCrseTY gV5w3h9qPCMYfLQOQaU3TWySd+rcplhe7PT3zdzUQjostaepb00gVOOzsDuQrkxrEV78=;
- Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; t=1792586306; s=livemail1; d=coochey.net; h=Message-ID:Date:Subject:In-Reply-To:References:To:From:Cc:Date:From: Subject:Sender; bh=CfzPUm+wlEPFvFH/T4zYV+hFQKthsvlRh1eKifw6Qms=; b=sgqkbu+1DhlDLmrLphfD/i3zedbMMvU7VVHI5xUn+3wnQ2PI2xK6DM+F61XHxVvlMU 5mF2G5DSUA44/cOrRp39PJ5CAlqRl3MvXHMTCQtBwrBESE46Zn3IRXVeH0STP1O3lJ+9 aFwkUC7uONAtV+JjgDnPSJhyzLh/Dlj/PjnyHYgU5Jh4/KYq5LripHmxG3CW7GkL2Qy3 qYHRAHD9MDl5ljlvqPbyc32zom5jbekhUlZo1+/eIY7IQOeue3nCYfTZ/hGBsINcVbln JhYafW/QuKKIHbkDzHqNH4quOfFyRLSRcBkBmsYc5EbKXKVQIj36G9a9NZchqrB7B6Cv gwtA==
- Thread-index: AQGWZ5P1T3kDV3vHGuRnYG3CcLScaQJNObBct4N42BA=
TLS is used a lot more than just websites. Many B2B API communications rely
on it, and this provides a massive MiTM attack much easier to exploit.
-----Original Message-----
From: Simon Waters <simon@xxxxxxxxxxxxxx>
Sent: 21 October 2026 13:28
To: list@xxxxxxxxxxxxx
Subject: [LUG]Re: TLS Certs issue
On Wed, 2026-10-21 at 08:13 +0100, zleap via list wrote:
>
> https://arstechnica.com/security/2026/10/the-internet-goes-on-high-ale
> rt-after-discovery-of-8-compromised-tls-certs/
>
> sysadmins need a massive pay rise
I think this one whilst bad is largely dealt with in the browser space.
By the time I heard about it my browser knew to ignore these certificates.
Mostly a problem with things using fixed CA lists, so things out of
maintenance or not getting security updates, or old containers. But I think
this is not that distinct from general issue of not updating.
On subject of which server with the DCGLUG site is long overdue an update.
Simon
--
The Mailing List for the Devon & Cornwall LUG
FAQ: https://www.dcglug.org.uk/faq/
--
The Mailing List for the Devon & Cornwall LUG
FAQ: https://www.dcglug.org.uk/faq/
