Hacker News new | ask | show | jobs
by egberts1 697 days ago
This is why we should be doing dual-server-client TLS certificate exchange before stuffing damaging info over Internet. But, alas, nooooooooo.
3 comments
Andrex 697 days ago
Any more post-relevant insights we should congratulate you for, or is it just this one?
link
HL33tibCe7 697 days ago
How would mutual TLS have helped here?
link
egberts1 696 days ago
Mutual TLS dutifully breaks if there is a transparent HTTPS proxy like SSLbump or Squid.
link
ozim 697 days ago
You can do certificate pinning.
link