MTLS: WHEN CERTIFICATE AUTHENTICATION IS DONE WRONG

Summary from the TLDR Web Dev newsletter

This post by GitHub Engineering deep dives into some interesting attacks on mTLS authentication. mTLS, or Mutual TLS, are website certificates for site security. However, mTLS does have some implementation vulnerabilities. Developers can make their mTLS systems vulnerable to user impersonation, privilege escalation, and information leakages. The post details multiple real-world examples of such vulnerabilities.