Aapo Oksman: certmitm — Automated Exploitation of TLS Certificate Validation Flaws

Aapo Oksman: certmitm — Automated Exploitation of TLS Certificate Validation Flaws https://peertube.eqver.se/videos/watch/5913c844-741f-4246-8563-7905f7db9fa3 A DEF CON 31 talk on weaknesses in TLS certificate validation within client applications. Despite the widespread use of TLS, developers often implement certificate checks incorrectly or rely on insecure library configurations. The researcher introduces certmitm, a tool that automatically detects and exploits these vulnerabilities. Through real-world examples, the talk demonstrates how such flaws can enable man-in-the-middle (MITM) attacks against applications on platforms like iOS and Windows 11. Fri, 24 Jul 2026 11:44:05 GMT https://validator.w3.org/feed/docs/rss2.html PeerTube - https://peertube.eqver.se Aapo Oksman: certmitm — Automated Exploitation of TLS Certificate Validation Flaws https://peertube.eqver.se/client/assets/images/icons/icon-512x512.png https://peertube.eqver.se/videos/watch/5913c844-741f-4246-8563-7905f7db9fa3 All rights reserved, unless otherwise specified in the terms specified at https://peertube.eqver.se/about and potential licenses granted by each content's rightholder.