Embed Notice
HTML Code
Corresponding Notice
- Embed this notice
feld (feld@bikeshed.party)'s status on Thursday, 16-Nov-2023 02:13:57 JSTfeld @tykling it just means an attacker only has to look and see your CAA supports both but the current certificate is from LetsEncrypt, so they can repeat this attack by asking ZeroSSL to issue the cert
at least for your described scenario