TLS Client Authentication Leaks User Info (pre-TLS1.3)

This page cannot be shown here. You can still read it on the original site — the toolbar below keeps your place in the directory.

TLS Client Authentication Leaks User Info (pre- TLS1 .3) Posted: October 15, 2018 at 10:54 AM security TLS It’s been long known that TLS is not the best privacy protecting protocol in that SNI leaks what domain the client connects to. I’m a bit surprised that I haven’t seen the failure to protect user information when using client authentication mentioned, but it’s likely that TLS client…

Read on /2018/10/tls-client-authentication-leaks-user.html ↗