Microsoft on Tuesday updated its Certificate Trust List (CTL) after private keys for an SSL/TLS digital certificate for Xbox Live were “inadvertently disclosed,” it said in a security advisory.
The *.xboxlive.com digital certificate could be used to attempt man-in-the-middle attacks, the company said.
In such an attack, the attacker could use the certificate to impersonate the xboxlive.com domain and intercept the website’s secure connection.
Full Article
