DevOps Articles

Revisiting BetterTLS: Certificate Path Building

If you haven’t read that blog post, you should. This post is probably going to make a lot more sense if you’ve read that one first, so go ahead and read it now.

In the context of TLS, that collection of certificates is sent from the server to the client as part of the TLS handshake.

The most important reason for clients to support robust path building is that it allows for agility in the web PKI ecosystem.

So what does the new test suite in BetterTLS tell us about the state of certificate path building in TLS implementations?