Conversation

You’re unable to view this Tweet because this account owner limits who can view their Tweets. Learn more
Replying to
It's not really as bad as it seems. It's a vulnerability in an obsolete feature already widely disabled as a best practice. twitter.com/DanielMicay/st It's one of the things checked by internet.nl and other free, publicly available security scanning tools.
Quote Tweet
Replying to @DanielMicay and @FiloSottile
Client-initiated renegotiation is disabled by default in nginx since November 2009. It should be disabled elsewhere too and should really be disabled by default in a future major version OpenSSL. It's unnecessary attack surface and has been known to be for a very long time.