Recently, experts from QAX Technology Research Institute, together with scholars from Tsinghua University, Fudan University and The University of Texas, completed an academic paper of HTTPS hijacking attack based on shared TLS certificate, which was accepted by the international top academic conference ACM CCS 2020.
This study proves another serious security threat to Web PKI and HTTPS encrypted communication, and it proposes mitigation solutions against such attacks, which have been recognized by academic experts and vendors.
For more information, visit:
http://netsec.ccert.edu.cn/chs/publications/CCS20-Strangers