News for hackers. Stuff that matters.

A comment on Bug in Lynx's SSL certificate validation – leaks password in clear text via SNI. Parent comment

Re:Bug in Lynx's SSL certificate validation – leaks password... by agwa on Saturday August 07, 2021 @05:21PM (#28101951)
X509's subject alternative name extension has nothing to do with TLS' SNI extension. SNI does not have a mechanism for locally-defined name types akin to X509's OtherName.
[ Parent | on HN ]
Re:Bug in Lynx's SSL certificate validation – leaks password... by X-Istence on Sunday August 08, 2021 @05:17PM (#28110190)
SNI matches certificates by looking at the SAN list on a list of certificates and finding the best match.
[ Parent | on HN ]