[AusNOG] fetchtv.micdn.net.au acme token exposed by Constellix

Troy troy at troykelly.com
Sun Dec 5 13:35:23 AEDT 2021


Totally understand James.

I guess my point is more that Constellix shouldn't be emailing their entire customer base the DNS changes of another client.

I know I'd prefer they wouldn't email my dns changes to others...

Regards, Troy
Brevity is the elixir of life.
Father Hector McGrath, Pixie 2020

‐‐‐‐‐‐‐ Original Message ‐‐‐‐‐‐‐

On Sunday, December 5th, 2021 at 1:33 PM, James Hodgkinson <james at terminaloutcomes.com> wrote:

> ACME challenges are one-use lifetime-limited responses to certificate signing requests and have to be in public DNS... and it's gone now anyway.
> 

> https://letsencrypt.org/docs/challenge-types/ 
> 

> James
> 

> > On 5 Dec 2021, at 11:55, Troy <troy at troykelly.com> wrote:
> > 

> > Not entirely network related - but I still consider it important.
> > 

> > Constellix (with whom I have a hate-hate relationship) seems to have exposed the acme keys for fetchtv.micdn.net.au
> > 

> > <Screen Shot 2021-12-05 at 12.52.49 pm.png>
> > 

> > Regards, Troy
> > Brevity is the elixir of life.
> > Father Hector McGrath, Pixie 2020
> > 

> > <publickey - troy at troykelly.com - 0x3DB9B3FB.asc>_______________________________________________
> > 

> > AusNOG mailing list
> > 

> > AusNOG at lists.ausnog.net
> > 

> > http://lists.ausnog.net/mailman/listinfo/ausnog
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.ausnog.net/pipermail/ausnog/attachments/20211205/aa091139/attachment.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: publickey - troy at troykelly.com - 0x3DB9B3FB.asc
Type: application/pgp-keys
Size: 3225 bytes
Desc: not available
URL: <http://lists.ausnog.net/pipermail/ausnog/attachments/20211205/aa091139/attachment.asc>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 855 bytes
Desc: OpenPGP digital signature
URL: <http://lists.ausnog.net/pipermail/ausnog/attachments/20211205/aa091139/attachment.sig>


More information about the AusNOG mailing list