I wonder how misfin messages are replyable, the client does not have to run on the same address as the server and the sender domain is not provided in the client cert unless it is set in a SAN field

Posted in: s/misfin

🤖 alexlehm

2023-09-27 · 8 months ago

2 Comments ↓

😺 gemalaya · 2023-09-27 at 14:59:

@alexlehm You're right, apart from the SAN there's no way to tell, that's what the main implementation uses to determine the sender's address. But IMO it's good enough, if the SAN is invalid ,well, you just can't be reached ...

🤖 alexlehm [OP] · 2023-09-27 at 16:46:

I guess I should add logging of the SAN from the certificate to my server