4 ms·
In addition to very few distros using OpenSSL 3, your server is only affected if you do client certificate verification, which is exceptionally rare for public
by Sohcahtoa82 4y ago
In addition to very few distros using OpenSSL 3, your server is only affected if you do client certificate verification, which is exceptionally rare for public internet servers.
As a client, you're only affected if you connect to a malicious server.
- ignaloidas 4y agoCould in theory be utilized to move laterally in networks where client TLS is used for authentication, which I see used sometimes.