GoAhead TLS Flaws Allow Revoked Client Certificates and Enable Session Decryption
GoAhead, an embedded web server that EmbedThis says runs in hundreds of millions of devices, loaded a certificate revocation list into its default TLS backend but never enabled revocation checking, so a revoked client certificate could still complete the...