Comment on The Case of the Modified BinariesparentComments−Animats11yThis is an indictment of Cloudfront offering to be your SSL termination point, and using multiple-domain certs to do it. Here's the Black Hat paper on how to exploit that.https://bh.ht.vc/vhost_confusion.pdf
Comments
This is an indictment of Cloudfront offering to be your SSL termination point, and using multiple-domain certs to do it. Here's the Black Hat paper on how to exploit that.
https://bh.ht.vc/vhost_confusion.pdf