The Cloudflare mTLS vulnerability - A Deep Dive Analysis

episode

The Backend Engineering Show with Hussein Nasser not yet transcribed

▲ 0

Transcript

This episode hasn't been transcribed yet Upvotes decide what gets transcribed next — 0 so far. Sign in to upvote

Related

recent transcribed audio

7AM ET 09/29/2026 Newscast 3 min · 29 Sep 2026 · Fox News Hourly Update

Federal boost for Navitas 6 min · 29 Sep 2026 · Wall Street Breakfast

1031: Tokenomics: Why Your Agentic AI Bill Is Exploding (and How to Fix It), with Tyler Cox and Ish Shah 1h 14m · 29 Sep 2026 · Super Data Science: ML & AI Podcast with Jon Krohn

1606 - Josh Finally Got his Wife to Hotwife for Him 56 min · 29 Sep 2026 · Strictly Anonymous Confessions

OpenAI Scraps Latest Model on Safety Concerns 2 min · 29 Sep 2026 · WSJ Minute Briefing

The Bobby Williamson trail 34 min · 29 Sep 2026 · Football Ramble

Report any issue

Source

Recorded06 Apr 2023

Publisheranchor.fm ↗

Handlerec:9885796

Show notes

Cloudflare released a blog detailing a vulnerability that has been in their system for nearly two years. it is related to mTLS or mutual TLS and specifically client certificate revocation. I explore this in details 0:00 Intro 3:00 The Vulnerability 7:00 What happened? 8:50 Certificate Revocation 12:30 Rejecting certain endpoints 17:00 Certificate Authentication 20:30 Certificate serial number 24:00 Session Resumption (PSK) 35:00 The bug 37:00 How they addressed the problem Fundamentals of Backend Engineering Design patterns udemy course (link redirects to udemy with coupon) https://backend.husseinnasser.com

Ask this episode

“What did the council decide on item 42?” — answered with the speaker and the moment.

Sign in