@phlogiston@mastodon.nz My understanding (enthusiastic amateur level) is that almost no certificates use RSA without some kind of padding that would prevent this particular attack (notably, Privacy Pass used by Cloudflare and Apple is an exception, which is ironic given their respective relatively stellar records on secure cryptographic implementations)