hina@hinanet @hina@mdn.hinaloe.net

I wrote too much about last week's discovery of the (first?) 0-day RCE in an ACME client, along with what you should know about ACME clients and servers: https://matt.life/writing/the-acme-protocol-in-practice-and-reality

(I won't publish this link more widely until tomorrow morning to give a chance for early feedback. Since I have almost no audience here, y'all get the sneak peek.)