#goahead


GoAhead TLS Flaws Allow Revoked Client Certificates and Enable Session Decryption

Oct 27, 2026 // 17:06

The GoAhead embedded web server loaded a certificate revocation list into its default TLS backend but never turned revocation checking on, so a revoked client […]