The Cloudflare MTLS Vulnerability - A Deep Dive Analysis

Dive deep into a comprehensive analysis of the Cloudflare mTLS vulnerability in this 42-minute video. Explore the intricacies of the security flaw that persisted in Cloudflare's system for nearly two years, focusing on mutual TLS and client certificate revocation. Learn about certificate authentication, serial numbers, session resumption, and the specifics of the bug. Understand the timeline of events, the impact on certain endpoints, and the measures taken to address the problem. Gain valuable insights into cybersecurity practices and the complexities of managing large-scale systems through this detailed examination of a real-world vulnerability.

Intro
The Vulnerability
What happened?
Certificate Revocation
Rejecting certain endpoints
Certificate Authentication
Certificate serial number
Session Resumption PSK
The bug
How they addressed the problem