A newly recorded flaw in TLS 1.2 implementations lets a client deliberately choose a weaker message digest than the server requested during client-certificate authentication — a subtle but real violation of the TLS 1.2 handshake rules that has been cataloged as CVE-2025-12889 and fixed in the...
