« first day (3518 days earlier)      last day (1660 days later) » 

MechMK1
MechMK1
07:24
Ah yes, we had that too, that we labelled businesses that were owned by minorities
But for uhm...other reasons
 
7 hours later…
Vipul Nair
Vipul Nair
14:50
@ConorMancone so it does help them.Thats good
John Zhau
John Zhau
15:11
Let's say I have 2 subdomains, a.example.com & b.example.com. a.* uses proper TLS 1.3, while b.* uses TLS 1.0 with weak encryption. Can an attacker somehow force a.* to use `b.*'s SSL/TLS config, thus forcing a downgrade?
MechMK1
MechMK1
15:21
@JohnZhau Depends on the configuration. There certainly isn't a design flaw that allows you to always do that.
Conor Mancone
Conor Mancone
@JohnZhau I don't think so. The server that is "hosting" those applications is going to determine what verions of TLS are available and what certs are used, so even if you were on a subdomain and the parent domain had a wildcard cert with weak TLS, the sub domain would still be fine, unless someone did something really weird...
Maybe in some shared-hosting situations with a bad misconfiguration?

« first day (3518 days earlier)      last day (1660 days later) »