Updates and posts about Amazon Associates..
Exploiting Amazon Simple Notification Service Improper Validation of SigningCertUrl
IntroductionCountless applications rely on Amazon Web Services’ Simple Notification Service for application-to-application communication such as webhooks and callbacks. To verify the authenticity of these messages, these projects use certificate-based signature validation based on the SigningCertURL..
