#dev 2018-07-27

2018-07-27 UTC

oodani there's a few other prerequisites for that kind of attack - in particular, the attacker would need to poison your dns in order to have the malicious site use the same domain name as is on the certificate - but yep