[chime]

So the app/user just thinks it is a network/connection error?

[tptacek]

It basically is a network/connection error. At this point in the transaction, neither side has had a chance to reveal anything sensitive.

If I understand the bug properly, basically all this says is "if you want to use client certificates with an iOS app, you have to use RSA".