[Fwd: Re: selfcare.btl.mu problem]

From: Loganaden Velvindron <logan_at_hackers.mu>
Date: Sat, 19 Dec 2015 09:23:14 -0500

Forgot to cc MIU :)

---------------------------- Original Message ----------------------------
Subject: Re: selfcare.btl.mu problem
From: "Loganaden Velvindron" <logan_at_hackers.mu>
Date: Sat, December 19, 2015 9:21 am
To: sm+mu_at_elandsys.com
--------------------------------------------------------------------------

Dear SM,

As you wrote in your mail, the certificate has expired. The ISP should
look into monitoring the expiry dates of its SSL certificates. The problem
that I can think of here is an attacker setting up a man in the middle
attack with a rogue certificate. On some browsers, an unsuspecting user
wouldn't pay attention to those details.

The impact would be capturing credentials of the Internet Connection, and
reusing it somewhere else.
Received on Sat Dec 19 2015 - 14:23:30 PST