17th and 18th February, 2023
Kaapelitehdas, Helsinki Finland
Your connection is not private - Exploiting insecure certificate validation in TLS clients
Aapo OksmanSenior Security Specialist at Nixu
Securing websites and servers with TLS has never been easier. But what about the clients that connect to them? Most TLS connections security rely on the clients ability to validate the server identity correctly.
This talk explores the 'most dangerous code in the world'. Lets hack an iPhone, Windows 11 and more while we deep dive into the world of insecure TLS certificate validation.
This talk explores the 'most dangerous code in the world'. Lets hack an iPhone, Windows 11 and more while we deep dive into the world of insecure TLS certificate validation.
Aapo Oksman, Senior Security Specialist at Nixu
Aapo Oksman is a Senior Security Specialist at Nixu Corporation, working with application, protocol and device security focusing on industrial IoT. His background is in electrical engineering, embedded devices, and test automation.