Skip to Content.
Sympa Menu

assurance - Re: [Assurance] can two-factor be hacked ?

Subject: Assurance

List archive

Re: [Assurance] can two-factor be hacked ?


Chronological Thread 
  • From: "Cantor, Scott" <>
  • To: "" <>
  • Subject: Re: [Assurance] can two-factor be hacked ?
  • Date: Wed, 12 Mar 2014 15:48:09 +0000
  • Accept-language: en-US
On 3/12/14, 11:43 AM, "Tom Scavo"
<>
wrote:
>
>I don't understand the client cert use case as well as Duo but I
>suspect it has the same weakness.

It doesn't. There's no MITM attack with TLS client authentication, unless
the server is mis-handling data it received prior to authentication and
attaching it to a later connection from the authenticated client.

-- Scott



Archive powered by MHonArc 2.6.16.

Top of Page