Comment by gzread
2 hours ago
To detect the misissuance you would run something that compares the certs requested by the server with the certs actually issued and included in the log. If you don't care (and most people don't) then you don't detect it.
No comments yet
Contribute on Hacker News ↗