eMudhra are now blocking access to their certificate revocation list URLs, so a MITM attacker using their certs with private key 4 keep working
topham · 2026-10-27 13:21:11 UTC
It's almost like this is intentional. Weird.
rmccue · 2026-10-27 13:52:42 UTC
Seems to me more like they've deployed some default WAF in front of their web properties, without considering the specific needs for the CRL endpoints.
pseudohadamard · 2026-10-28 03:48:25 UTC
The post indicates its a misconfigured WAF that's blocking automated tools/potential scrapers, not an overall block.
Comments