HackiNews

• deadliftdouche
  eMudhra are now blocking access to their certificate revocation list URLs, so a MITM attacker using their certs with private key 4 keep working
• topham
  It's almost like this is intentional. Weird.

  • rmccue
    Seems to me more like they've deployed some default WAF in front of their web properties, without considering the specific needs for the CRL endpoints.

    • pseudohadamard
      The post indicates its a misconfigured WAF that's blocking automated tools/potential scrapers, not an overall block.