summaryrefslogtreecommitdiff
path: root/README.md
diff options
context:
space:
mode:
Diffstat (limited to 'README.md')
-rw-r--r--README.md10
1 files changed, 9 insertions, 1 deletions
diff --git a/README.md b/README.md
index 8a81dfb..7817c0e 100644
--- a/README.md
+++ b/README.md
@@ -21,6 +21,14 @@ For more information, see these files in the ``doc`` directory:
* DEVELOP -- for developer notes.
* CUSTOM -- how to customize.
+Known problems
+---------------------------
+
+* Client certificates are generated without a CSR. The problem is that this makes the web
+application extremely vulnerable to denial of service attacks. This was not an issue until we
+started to allow the possibility of anonymously fetching a client certificate without
+authenticating first.
+
Installation
---------------------------
@@ -75,4 +83,4 @@ To run all tests
To run an individual test:
- rake test TEST=certs/test/unit/client_certificate_test.rb \ No newline at end of file
+ rake test TEST=certs/test/unit/client_certificate_test.rb