For the want of an underscore
DigiCert has given some unlucky customers 24 hours to replace their SSL/TLS security certificates it previously issued them – due to a five-year-old blunder in its backend software.
Though this won't be too much fun for those of you who have to replace their certs, the cause of the recall is pretty interesting.There are various ways in which a domain name owner can demonstrate that ownership to an authority such as DigiCert, though the one relevant to this kerfuffle involves DNS CNAMEs, random digits, and underscores.
The chance of such a collision is extremely, extremely low because the random number being generated has at least 150 bits of entropy, but surely no one leaves things like that to chance in information security. By putting an _ at the start, the full domain name is invalid as it must, by the rules of the internet, start with an alphanumeric character.
The underscore prefix addition was not separated into a distinct service. One path through the updated system did not automatically add the underscore nor check to see if the random value had a pre-appended underscore.Unfortunately, no reviews were done to compare the legacy random value implementations with the random value implementations in the new system for every scenario.
United States Latest News, United States Headlines
Similar News:You can also read news stories similar to this one that we have collected from other news sources.
Top donator to Jay Slater GoFundMe gives £2k in 24 hours to pass £70k markThe donor made two separate donations - one of which was the highest single donation to the fund - on the same day
Read more »
Danny Drinkwater hits back at troll that said he’s hit ‘rock bottom’ after revealing new job...Former Leicester City star Marc Albrighton gives fascinating insight on Chelsea boss Enzo Maresca
Read more »
Lando Norris told what he ‘should have done’ during McLaren team orders falloutMartin Brundle gives his take on McLaren's controversial F1 team orders row in Hungary.
Read more »
Stephen Nolan remains BBC's fifth highest paid presenterThe BBC's annual report gives the pay details of its top earning presenters and staff.
Read more »
‘Hate to see it, raise kids with manners’ fans slam as they spot cheeky detail in Paris Fury’s family holid...Paris Fury rages as daughter gives her the finger
Read more »
Enzo Maresca reveals Christopher Nkunku plan for as he lays out style of play for new season...Former Leicester City star Marc Albrighton gives fascinating insight on Chelsea boss Enzo Maresca
Read more »