Java, I’m looking at you (though Chrome will get glared at as well). The most tedious TLS rabbit holes are the ones that relate to inconsistencies between TLS clients.  A certificate will work in most cases, and then one client will fail, and then down the rabbit hole you go, waving to a Cheshire cat […]