in reply to How do I ensure client side certificates are used in SSL handshaking?

One thing I didn't mention, and should have, is this: I have often seen, as a result of googling error messages, requests for direction on how to ignore some of these error messages. I am not interesting in ignoring error messages, but rather, in ensuring that both server and client side certificates are properly handled, and that the SSL/TLS handshaking to establish the connection is handled correctly, and in the most secure manner possible. It seems to me that ignoring these errors probably creates the illusion of secure communications while creating real security vulnerabilities. I am no expert in SSL/TLS, so correct me if I am wrong, but that is the view I willl act on until I see evidence to the contrary.

Thanks

Ted

  • Comment on Re: How do I ensure client side certificates are used in SSL handshaking?