emv [🦊] is a user on vulpine.club. You can follow them or interact with them if you have an account anywhere in the fediverse. If you don't, you can sign up here.
emv [🦊] @emv

Report that is handling a vulnerability:

"[Investigating] The tls-sni challenge has been disabled due to strong credibility of a vulnerability report."

letsencrypt.status.io/pages/in

Impact to

"Welp, the autocert (golang.org/x/crypto/acme/autoc …) @letsencrypt package is now broken because it relies on tls-sni-01, which just got emergency shut down:"

twitter.com/bradfitz/status/95

· 8 · 2

@greyduck

yeah. not a good night for the internets.