The Problem with OCSP Stapling and Must Staple and why Certificate Revocation is still broken - Hanno's blog
Tags
attack-pattern: Dns - T1071.004 Dns - T1590.002 Domains - T1583.001 Domains - T1584.001 Private Keys - T1552.004 Server - T1583.004 Server - T1584.004 Private Keys - T1145
Show in Graph
Common Information
Type Value
UUID f23d98f7-a25d-4e74-a7f5-6edc8a236792
Fingerprint eeb4db657e027dc0
Analysis status DONE
Considered CTI value 0
Text language
Published May 19, 2017, midnight
Added to db Jan. 18, 2023, 8:30 p.m.
Last updated Nov. 18, 2024, 11:24 a.m.
Headline The Problem with OCSP Stapling and Must Staple and why Certificate Revocation is still broken
Title The Problem with OCSP Stapling and Must Staple and why Certificate Revocation is still broken - Hanno's blog
Detected Hints/Tags/Attributes 14/1/7
Source URLs
Redirection Url
Details Source https://blog.hboeck.de/archives/886-The-Problem-with-OCSP-Stapling-and-Must-Staple-and-why-Certificate-Revocation-is-still-broken.html
URL Provider
Details Provider Source level domain
Details hboeck.de blog.hboeck.de
Attributes
Details Type #Events CTI Value
Details Domain 3 
mozilla.github.io
Details Domain 4131 
github.com
Details Domain 18 
hboeck.de
Details Email 17 
hanno@hboeck.de
Details Github username 1 
omnigroup
Details Url 2 
https://mozilla.github.io/server-side-tls/ssl-config-generator
Details Url 1 
https://github.com/omnigroup/apache/blob/master/httpd/modules/cache/mod_socache_shmcb.c#l308