Latest / The Identity Blueprint
Why You Must Kill Your Certificate Authority
Send us Fan Mail
You can migrate every user to the cloud and retire every workload, and Active Directory still won't go away — because two systems, your certificate authority and Exchange Hybrid, are quietly holding the domain controller hostage. 🔐
In this episode, Ernie and Josée trace exactly how a low-privilege foothold — a phished user, an exposed ethernet jack — escalates into full domain compromise using nothing but native Windows features: coercing a domain controller into an NTLM handshake, relaying it to the certificate authority's web enrollment endpoint, and walking away with a…
The skinny
The skinny isn't ready yet — notes appear once the transcript is processed.