logoalt Hacker News

paulirishtoday at 5:11 PM1 replyview on HN

https://badssl.com/ also offers several test subdomains in the same vein.


Replies

NicolaiStoday at 8:49 PM

badssl.com is an amazing tool especially for testing "TLS intercepting" boxes. I've seen more than one fortune 500 company that re-sign certain broken certs with their own CA, allowing silent MITM.