logo
DATABASE RESOURCES PRICING ABOUT US

Privacy issue with SSL Client Authentication — Mozilla

Description

Peter Brodersen and Alexander Klink independently reported that the default setting for SSL Client Authentication, automatically selecting a client certificate on behalf of the user, creates a potential privacy issue for users by allowing tracking through client certificates. For users who already have certificates some real-world identity information such as an email address or name may be available to web sites depending on the purpose of the certificate and its issuer.


Affected Software


CPE Name Name Version
firefox 2.0.0.13
seamonkey 1.1.9

Related