Dan Gudmundsson

Plaintext APPLICATION_DATA injected during TLS handshake delivered to client application post-handshake in ssl

nameConstraints DNS bypass via subject CommonName fallback in public_key hostname verification

TLS/DTLS denial of service via unbounded recursion on cross-signed peer certificate chain

TLS 1.3 server denial of service via malformed ClientHello pre-shared key extension

DTLS listener crash via race condition in dtls_packet_demux causes denial of service for all sessions

DTLS server cookie bypass during startup window due to empty initial cookie secret