Later archive addition

Virtual Host Confusion: Weaknesses and Exploits

Antoine Delignat-Lavaud and Karthikeyan Bhargavan

HTTPS servers routinely serve many origins behind one certificate and one IP address. Shared TLS session caches, session tickets and SPDY connection reuse let an attacker who controls any single domain on a multi-domain certificate answer requests meant for the others, stealing cookies and sign-on tokens and bypassing certificate validation.

Record

Researcher

Antoine Delignat-Lavaud and Karthikeyan Bhargavan

Format

Whitepaper

In the archive

• Added to the 2014 archive after the original list was published

Tags

• sop-bypass
• tls
• https
• same-origin-policy
• cdn
• cookie
• http2
• sso
• owasp-a01-2021
• owasp-a02-2021
• owasp-a07-2021

This page is the archive's own catalogue record. The research is the work of Antoine Delignat-Lavaud and Karthikeyan Bhargavan, first published at the original source. Preserved copies are kept so the citation survives its host.