Topic · 6 stories
6 stories tagged tls on AI Tamer, newest first.
Cloudflare logged 22,000 handshakes using eMudhra's weak keys and found bots, old browsers and WebViews still accept them. Check your stack.
Four rustls advisories, from a Debug leak of TLS secrets to a post-quantum downgrade, landed on 27 October. Upgrade to 0.23.46 if you haven't.
On 10 February 2027 Let's Encrypt defaults to 64-day certificates unless a subscriber picks 45 or 6 days. It expects the last 90-day one to expire 11 May 2027.
A trusted TLS certificate can belong to the wrong service. Follow the reference hostname into subjectAltName and reject mismatches without Common Name fallback.
A trusted certificate can coexist with an unexpected HTTP protocol. Learn how ALPN selects h2 or http/1.1 and what to verify at a voice or AI API edge.
Redis advisory CVE-2026-81934 (Aug 28, 2026): authenticated TLS pending-data use-after-free; public CVSS revised 9.8→7.5 High. Upgrade OSS/Software builds; Cloud Essentials patched, Pro underway.
