Web Hack List

Later archive addition

BygoneSSL

BygoneSSL shows that a TLS certificate can remain valid after its domain registration changes hands. A previous owner may retain a certificate capable of impersonating the new site, while shared subject-alt names can also create a revocation-driven denial of service against unrelated domains on the same certificate.

In the archive

Tags

This page is the archive's own catalogue record. The research is the work of its author, first published at the original source. Preserved copies are kept so the citation survives its host.