Skip to main content
2 votes

Using mTLS for API access control and authentication

Client certificate authentication should give you strong assurance that the client is whom they claim to be (as specified in the certificate subject or through the Subject Alternative Name extension). ...
Ja1024's user avatar
  • 10k
2 votes

export burp certificate to wireshark for inspection

Don't import the certificate as RSA key, but configure it under Protocols > TLS > RSA keys list. Wrong: Right: Furthermore, this only works when the connection uses RSA without forward secrecy....
Sjoerd's user avatar
  • 31.4k

Only top scored, non community-wiki answers of a minimum length are eligible