my tweets are severely limited by my lack of understanding of what I am doing.
I hacked a lotta banks in my time, and was never cause a cert was missing an x509v3 SAN. Hyping bullshit TLS issues helps exactly no one. :<https://twitter.com/troyhunt/status/904590922347716608 …
-
Bad TLS as an externally measurable metric for whether an organisation has a mature security process, sure. But it aint getting ya no shell.
