Mmastodon TechnologyCybersecurity first seen 9 d ago, last 9 d ago, peak #7
GoAhead web server flagged over three TLS flaws
Original: Anyone talking about how # GoAhead s servers are using "04" for their keys? BirdSite Reporting, but 3 TLS issues, one sh
Security researchers are discussing three TLS-related problems in the GoAhead embedded web server, which is widely used in devices. One issue reportedly truncates certificate keys to just the "04" prefix, another means certificate revocation lists are not checked, and a third removes support for mutual TLS authentication. The findings were published in a FoxIO blog post and are circulating among security engineers concerned about affected embedded devices.
Why now: A newly published FoxIO write-up describing serious TLS weaknesses in a widely deployed embedded web server is being shared among security professionals.
Evidence
- Anyone talking about how # GoAhead s servers are using "04" for their keys? BirdSite Reporting, but 3 TLS issues, one shortens the keys to "04", one declines to assess CRLs, and the third just doesn't do mTLS anymore. https:// foxio.io/blog/choose-your-back… · iaintshootinmis@digitaldarkage.cc · 4
API: https://socialmediatrends-api.osmike.com/v1/trends/3899695