Cloudflare mTLS client certificate revocation vulnerability with TLS Session Resumption

Upon realizing that session resumption led to the inability to properly check revocation status, Cloudflare responded by first disabling session resumption for all mTLS connections. This blocked the vulnerability immediately.

>>More