Credits: @PaultheGreatest , @jurajsomorovsky, Kostis Sagonas, Bengt Jonsson,@cypherpunknl
-
-
Show this threadThanks. Twitter will use this to make your timeline better. UndoUndo
-
-
-
So seems I was right in https://twitter.com/ZTarantov/status/1217790190372167681 … and is the conclusion that JSSE is garbage or that TLS client should not be used?
-
I think it just needs more eyes on it.
End of conversation
New conversation -
-
-
thank you. If I have TLS terminated on an Offloader-Webserver (Apache/Nginx) in front of my Java-App then I should be unaffected?
-
If the server is not reachable for a potential attacker you should be fine. I still recommend patching though.
End of conversation
New conversation -
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.
