Hacker News: KairuBytehttps://news.ycombinator.com/user?id=KairuByteHacker News RSShttps://hnrss.org/hnrss v2.1.1Mon, 13 Jul 2026 05:36:46 +0000<![CDATA[New comment by KairuByte in "Encrypted traffic interception on Hetzner and Linode targeting Jabber service"]]>Because the attacker can simply request new keys. There’s nothing stopping them from going “hey LE, I need a new key! This is my domain, here is the challenge, give me my cert!” And LE will oblige, because as far as it can tell, they are you.

Edit: To be clear, this is a problem with a solution. But you asked why simply throwing a LE cert into the mix wouldn’t prevent the issue.

]]>Sat, 21 Oct 2023 02:17:51 +0000https://news.ycombinator.com/item?id=37963505KairuBytehttps://news.ycombinator.com/item?id=37963505https://news.ycombinator.com/item?id=37963505