eMudhra are now blocking access to their certificate revocation list
19 points
1/21/1970
20 hours ago
by deadliftdouche
Comments
deadliftdouche
20 hours ago
topham
It's almost like this is intentional. Weird.
20 hours ago
rmccue
Seems to me more like they've deployed some default WAF in front of their web properties, without considering the specific needs for the CRL endpoints.
20 hours ago
pseudohadamard
The post indicates its a misconfigured WAF that's blocking automated tools/potential scrapers, not an overall block.
6 hours ago
eMudhra are now blocking access to their certificate revocation list URLs, so a MITM attacker using their certs with private key 4 keep working