Class Central is learner-supported. When you buy through links on our site, we may earn an affiliate commission.

YouTube

The Cloudflare MTLS Vulnerability - A Deep Dive Analysis

Hussein Nasser via YouTube

Overview

Dive deep into a comprehensive analysis of the Cloudflare mTLS vulnerability in this 42-minute video. Explore the intricacies of the security flaw that persisted in Cloudflare's system for nearly two years, focusing on mutual TLS and client certificate revocation. Learn about certificate authentication, serial numbers, session resumption, and the specifics of the bug. Understand the timeline of events, the impact on certain endpoints, and the measures taken to address the problem. Gain valuable insights into cybersecurity practices and the complexities of managing large-scale systems through this detailed examination of a real-world vulnerability.

Syllabus

Intro
The Vulnerability
What happened?
Certificate Revocation
Rejecting certain endpoints
Certificate Authentication
Certificate serial number
Session Resumption PSK
The bug
How they addressed the problem

Taught by

Hussein Nasser

Reviews

Start your review of The Cloudflare MTLS Vulnerability - A Deep Dive Analysis

Never Stop Learning.

Get personalized course recommendations, track subjects and courses with reminders, and more.

Someone learning on their laptop while sitting on the floor.