spankysalmon

The PHP vulnerabilities (yes there is more than one) are relatively easy to exploit if you can fiddle with what requests your server receives (easy).

The DNS exploit requires someone to figure out how to man-in-the-middle your connection. While that is trivial for governments, it is much less likely to be done by purely bad actors, simply for how hard “internet” integration is and how visible the problem ends up.

Both are big problems, but only one of them is continually exploitable, as the DNS issues have been largely resolved even before the very public disclosure.

Again, nobody is asking for the high level view or an analogy. They’re asking for a specific fix.

The question is how does that, “issue a certificate” step work and does it require port 80, not what is the 10000 foot view.

Yes they do solve your issue, just not in the way you wanted.

Sounds like you need to do some growing up, too. Most of the time in the real world, imperfect answers are your only viable answers.

Then reply to the entire rest of their message where they said they’re assuming you being a creep isn’t the case…?