nayaread
HomeFavouritesTopicsSources
HomeFavouritesTopicsSources
NayaRead links to original engineering blogs. All copyright belongs to the respective authors.
The GitHub Blog·Aug 17, 2023·22 min read·Michael Stepankin63

mTLS: When certificate authentication is done wrong

In this post, we'll deep dive into some interesting attacks on mTLS authentication. We'll have a look at implementation vulnerabilities and how developers can make their mTLS systems vulnerable to user impersonation, privilege escalation, and information leakages.

Security
Read original on github.blog

Discussion around the web

  • Hacker News84 · 20 💬

Score breakdown

  • Technical depth85
  • Practical value60
  • Originality85
  • Writing quality82
  • Source reputation85
  • Recency0
  • External engagement27
  • On-site engagement0

NayaRead shows a summary and links to the original article. The full article is hosted on github.blog.

More like this

The Cloudflare Blog

Building a post-quantum certificate authority with Merkle Tree Certificates

Mari Galicer·14 days ago·11 min read
CNCF Case Studies

Finleap Connect

Jun 9, 2022·11 min read
Engineering at Meta

How Meta built large-scale cryptographic monitoring

Nov 12, 2024·13 min read
The Cloudflare Blog

Keyless SSL: The Nitty Gritty Technical Details

Sep 19, 2014·26 min read