Skip to content
The Cloudflare mTLS vulnerability - A Deep Dive Analysis episode artwork

Apr 6, 2023 43 min

The Cloudflare mTLS vulnerability - A Deep Dive Analysis

from The Backend Engineering Show with Hussein Nasser Hosted by Hussein Nasser

Cloudflare released a blog detailing a vulnerability that has been in their system for nearly two years. it is related to mTLS or mutual TLS and specifically client certificate revocation. I explore this in details 0:00 Intro 3:00 The Vulnerability 7:00 What happened? 8:50 Certificate Revocation 12:30 Rejecting certain endpoints 17:00 Certificate Authentication 20:30 Certificate serial number 24:00 Session Resumption (PSK) 35:00 The bug 37:00 How they addressed the problem Fundamentals of Backend Engineering Design patterns udemy course (link redirects to udemy with coupon) https://backend.husseinnasser.com

Episode details come from the podcast's RSS feed.

Embed this episode

Ready to play

The Cloudflare mTLS vulnerability - A Deep Dive Analysis

0:00 43:13

No transcript yet.

Requests help us decide what to transcribe next.

Share this episode

Frequently asked questions

How long is this episode of The Backend Engineering Show with Hussein Nasser?

This episode is 43 minutes long.

When was this The Backend Engineering Show with Hussein Nasser episode published?

This episode was published on April 6, 2023.

Can I download this The Backend Engineering Show with Hussein Nasser episode?

Yes. Use the download control on the episode player to save the publisher-provided media file.