SMACKTLS

Transport Layer Security (TLS) handles quite a bit of "heavy lifting" in the digital world... To really stress test the capabilities of TLS, though, a number of individuals have been searching out and hunting for state machine bugs, all in an effort to uncover as many security vulnerabilities as possible... Interestingly enough, throughout the research we were able to uncover the fact that a lot of TLS implementations simply allowed for this authentication message to be skipped over and worked around - even if the protocol "required" this kind of authentication message to proceed.