The Cloudflare MTLS Vulnerability - A Deep Dive Analysis The Backend Engineering Show With Hussein Nasser podcast

Artwork

Hussein Nasser Engineering Business Industries Open Source Programming Tech Software Development

内容由Hussein Nasser提供。所有播客内容（包括剧集、图形和播客描述）均由 Hussein Nasser 或其播客平台合作伙伴直接上传和提供。如果您认为有人在未经您许可的情况下使用您的受版权保护的作品，您可以按照此处概述的流程进行操作https://zh.player.fm/legal。

The Backend Engineering Show with Hussein Nasser « »
The Cloudflare mTLS vulnerability - A Deep Dive Analysis

2y ago 43:13

分享

MP3•单集首页

内容由Hussein Nasser提供。所有播客内容（包括剧集、图形和播客描述）均由 Hussein Nasser 或其播客平台合作伙伴直接上传和提供。如果您认为有人在未经您许可的情况下使用您的受版权保护的作品，您可以按照此处概述的流程进行操作https://zh.player.fm/legal。

Cloudflare released a blog detailing a vulnerability that has been in their system for nearly two years. it is related to mTLS or mutual TLS and specifically client certificate revocation. I explore this in details 0:00 Intro 3:00 The Vulnerability 7:00 What happened? 8:50 Certificate Revocation 12:30 Rejecting certain endpoints 17:00 Certificate Authentication 20:30 Certificate serial number 24:00 Session Resumption (PSK) 35:00 The bug 37:00 How they addressed the problem Fundamentals of Backend Engineering Design patterns udemy course (link redirects to udemy with coupon) https://backend.husseinnasser.com

… continue reading

526集单集

#Hussein Nasser #Engineering #Business #Industries #Open Source #Programming #Tech #Software Development

Artwork

The Cloudflare mTLS vulnerability - A Deep Dive Analysis

The Backend Engineering Show with Hussein Nasser

243 subscribers

published 2y ago

分享

MP3•单集首页

内容由Hussein Nasser提供。所有播客内容（包括剧集、图形和播客描述）均由 Hussein Nasser 或其播客平台合作伙伴直接上传和提供。如果您认为有人在未经您许可的情况下使用您的受版权保护的作品，您可以按照此处概述的流程进行操作https://zh.player.fm/legal。

Cloudflare released a blog detailing a vulnerability that has been in their system for nearly two years. it is related to mTLS or mutual TLS and specifically client certificate revocation. I explore this in details 0:00 Intro 3:00 The Vulnerability 7:00 What happened? 8:50 Certificate Revocation 12:30 Rejecting certain endpoints 17:00 Certificate Authentication 20:30 Certificate serial number 24:00 Session Resumption (PSK) 35:00 The bug 37:00 How they addressed the problem Fundamentals of Backend Engineering Design patterns udemy course (link redirects to udemy with coupon) https://backend.husseinnasser.com

… continue reading

526集单集

#Hussein Nasser #Engineering #Business #Industries #Open Source #Programming #Tech #Software Development

كل الحلقات

×

欢迎使用Player FM

Player FM正在网上搜索高质量的播客，以便您现在享受。它是最好的播客应用程序，适用于安卓、iPhone和网络。注册以跨设备同步订阅。

收听超过500个主题

边探索边听这个节目