We've published a new blog post about the recent jabber.ru security incident (a kind of attack we have not seen before). It did not affect Snikket servers, but we are taking steps to remove the possibility of such attacks in the future. This includes advice that self-hosters can follow.
@snikket_im very curious as to what you decide to do about CRT monitoring. Please share what tooling you end up using/developing, even if its something off-the-shelf!
@jabberati
Thanks! The problem is that we have hundreds of domains on our service, and so we really need something that can identify rogue certificates without drowning us in notifications about all the legitimate ones. That's apparently a bit harder...
Add comment