Tag
Researchers disclosed that Xray-core concealed a certificate verification bypass vulnerability, leaving a widely used censorship-circumvention tool exposed to man-in-the-middle attacks. The issue was raised on the Net4People BBS forum, a hub for developers and researchers working on internet censorship circumvention.
This blog post explores a subtle bug in Go's X.509 certificate verification where two seemingly identical CA certificates may lead to different results due to differences in PEM encoding whitespace handling.