Hacker News new | ask | show | jobs
by JakeWesorick 2169 days ago
What's an easy way to test if I am affected by this?
3 comments

Contact the customer support of whoever issued your SSL certificates and ask if you are affected by this.

If you use any of the major auto-issue, auto-renew certificate platforms, then you do not need to take any action — either you aren’t affected or they’ll issue a new certificate to you automatically. (Let’s Encrypt, AWS Certificate Manager, Google-Managed SSL Certificates, Heroku Automated Certificate Management)

Check if your browser shows a lock symbol on any important sites you visit.

(This affects the PKI as a whole, because a single unconstrained compromised sub-CA can misissue for any domain - so if you use HTTPS, you're affected).

If your question is whether you should take action, the answer is no, unless you're in some way responsible for an intermediate CA, which is something you'd know about.

Hi Jake! Enter your website URL in here, and it'll tell you if you're affected or not: https://ohdear.app/tools/certificate