New answers tagged certificate-authority
3
votes
Are my internal systems susceptible to MitM if the root/chain is shared amongst all customers?
Yes, the CA could be used for MitM attacks. There are at least two major design errors in this PKI:
The .internal TLD is strictly for, well, internal domains of a single organization, but letting the ...
- 17k
3
votes
Accepted
Are my internal systems susceptible to MitM if the root/chain is shared amongst all customers?
Is my understanding of this issue correct?
Based on your description the CA would issue certificates for arbitrary internal domains without any kind of validation, including no verification of ...
- 205k
Top 50 recent answers are included