5 ms·
What's an easy way to test if I am affected by this?
by JakeWesorick 6y ago
What's an easy way to test if I am affected by this?
- floatingatoll 6y agoContact the customer support of whoever issued your SSL certificates and ask if you are affected by this. If you use any of the major auto-issue, auto-renew certificate platforms, then you do not need to take any action — either you aren’t affected or they’ll issue a new certificate to you automatically. (Let’s Encrypt, AWS Certificate Manager, Google-Managed SSL Certificates, Heroku Automated Certificate Management)
- Mojah 6y agoHi Jake! Enter your website URL in here, and it'll tell you if you're affected or not: https://ohdear.app/tools/certificate https://ohdear.app/tools/certificate
- tgsovlerkhgsel 6y agoCheck if your browser shows a lock symbol on any important sites you visit. (This affects the PKI as a whole, because a single unconstrained compromised sub-CA can misissue for any domain - so if you use HTTPS, you're affected). If your question is whether you should take action, the answer is no, unless you're in some way responsible for an intermediate CA, which is something you'd know about.