4.2.1 Unauthorized Client Connecting to an IP-HTTPS Server (When Authentication Mode Is Set to Certificates)

  • Article

In this scenario, an unauthorized attacker poses as a valid IP-HTTPS client and tries to connect to a valid IP-HTTPS server. The HTTPS connection is not allowed to go through, as the attacker will not have a valid client certificate to present to the IP-HTTPS server.

Unauthorized IP-HTTPS client when configured to use client authentication

Figure 8: Unauthorized IP-HTTPS client when configured to use client authentication