Other nomination

Same Origin Spoofing to Attack Client Certificate Sessions

Tom Ritter · isecpartners.com

Shows SSL client certificates do not stop a server-impersonating attacker. Mallory completes a handshake without validating Alice's certificate, returns a page holding attacker script plus an iframe to the real site, then closes the connection so the iframe renegotiates legitimately. Same-origin access from the injected script then reads the mutually authenticated frame.

Record

Researcher

Tom Ritter

Published by

isecpartners.com

In the archive

• Nominated for the 2012 Top 10 Web Hacking Techniques

Tags

• tls
• https
• same-origin-policy
• iframe
• auth-bypass
• cache-poisoning
• mitigation
• owasp-a01-2021
• owasp-a02-2021

This page is the archive's own catalogue record. The research is the work of Tom Ritter, first published at the original source. Preserved copies are kept so the citation survives its host.