Suspected MitM attack against jabber.ru XMPP server, where the attacker leveraged fraudulently-issued LetsEncrypt certificates

This community should be very interested in reports about a suspected MitM attack against `jabber.ru`, a popular Russian XMPP server. If this is true (and based on the reports, it *sure looks true*), the attacker obtained a MitM, issued valid certificates using LetsEncrypt, and snarfed up messages while remaining undetected for months.

* Evidence for the attack itself: [https://web.archive.org/web/20231021000855/https://notes.valdikss.org.ru/jabber.ru-mitm/](https://web.archive.org/web/20231021000855/https://notes.valdikss.org.ru/jabber.ru-mitm/)
* On mitigating MitM attacks in the modern day: [https://web.archive.org/web/20231021063637/https://www.devever.net/\~hl/xmpp-incident](https://web.archive.org/web/20231021063637/https://www.devever.net/~hl/xmpp-incident)

Now you might be asking yourself, *why is this a Meta/Mod …

attack attacker certificates community cybersecurity jabber letsencrypt mitm mitm attack popular reports russian server valid xmpp