2 ms·

Except: ensuring that the server is signing with the right, certificate-certified private key is the major thing that TLS is supposed to provide. So no matter

by gojomo 13y ago

Except: ensuring that the server is signing with the right, certificate-certified private key is the major thing that TLS is supposed to provide. So no matter how strange or malicious the server-side stack would need to be... not having a test for such a deviation is a major oversight.

gsnedders 13y ago
The really scary thing is that there is basically no good testsuite for SSL/TLS in existence. I would not be surprised if other stupid bugs showed up in other implementations given one…