I’m not the only one taking a look at provisioning the iPhone. My focus was to show it working though, and not a complete analysis of the low-level details. Good thing someone else did then
(…)
Adding my two cents on the flaw described at http://cryptopath.wordpress.com/2010/01/29/iphone-certificate-flaws/