> Zerotier promptly addressed the root server identity verification issues. This attack is still possible (as of 20/09/2021); however, an attacker is required to invest significant compute time (many many years with a single RTX2070) to generate a valid identity that collides with an intended target. Zerotier client’s still accept any identity learned via WHOIS packet as implicitly valid.
It also says below that the main vuln is fixed... Can't now figure out if I should be worried or not...
It also says below that the main vuln is fixed... Can't now figure out if I should be worried or not...