A Web encryption vulnerability opens ‘encrypted’ data to hackers: Turns out that the Secure Sockets Layer (SSL) encryption we’ve relied on for secure communication on the Internet has a vulnerability. Today Google researchers announced (PDF link) that they have found a bug in the SSL 3.0 protocol. The exploit could be used to intercept critical data that’s supposed to be encrypted between clients and servers. The exploit first allows attackers to initiate a “downgrade dance” that tells the client that the server doesn’t support the more secure TLS (Transport Layer Security) protocol and forces it to connect via SSL 3.0. From there a man-in-the-middle attack can decrypt secure HTTP cookies. Google... This story...
Posted on: Wed, 15 Oct 2014 05:00:51 +0000
Trending Topics
Recently Viewed Topics
© 2015