www.praetorian.com/blog/man-in-the-middle-tls-ssl-protocol-downgrade-attack

Preview meta tags from the www.praetorian.com website.

Linked Hostnames

10

Thumbnail

Search Engine Appearance

Google

https://www.praetorian.com/blog/man-in-the-middle-tls-ssl-protocol-downgrade-attack

Man-in-the-Middle TLS Protocol Downgrade Attack

A flaw was recently found in OpenSSL that allowed for an attacker to negotiate a lower version of TLS between the client and server (CVE-2014-3511). While this vulnerability was quickly patched, an attacker that has control of your traffic can still simulate this attack today. Let’s explore how this is possible through looking at man-in-the-middle attacks and how browsers handle SSL/TLS connections. In addition, we will see the implications of the attack on cryptographic security.



Bing

Man-in-the-Middle TLS Protocol Downgrade Attack

https://www.praetorian.com/blog/man-in-the-middle-tls-ssl-protocol-downgrade-attack

A flaw was recently found in OpenSSL that allowed for an attacker to negotiate a lower version of TLS between the client and server (CVE-2014-3511). While this vulnerability was quickly patched, an attacker that has control of your traffic can still simulate this attack today. Let’s explore how this is possible through looking at man-in-the-middle attacks and how browsers handle SSL/TLS connections. In addition, we will see the implications of the attack on cryptographic security.



DuckDuckGo

https://www.praetorian.com/blog/man-in-the-middle-tls-ssl-protocol-downgrade-attack

Man-in-the-Middle TLS Protocol Downgrade Attack

A flaw was recently found in OpenSSL that allowed for an attacker to negotiate a lower version of TLS between the client and server (CVE-2014-3511). While this vulnerability was quickly patched, an attacker that has control of your traffic can still simulate this attack today. Let’s explore how this is possible through looking at man-in-the-middle attacks and how browsers handle SSL/TLS connections. In addition, we will see the implications of the attack on cryptographic security.

  • General Meta Tags

    12
    • title
      Man-in-the-Middle TLS Protocol Downgrade Attack | Praetorian
    • charset
      UTF-8
    • viewport
      width=device-width, initial-scale=1
    • robots
      index, follow, max-image-preview:large, max-snippet:-1, max-video-preview:-1
    • article:publisher
      https://www.facebook.com/praetorianlabs

  • Open Graph Meta Tags

    10
    • US country flagog:locale
      en_US
    • og:type
      article
    • og:title
      Man-in-the-Middle TLS Protocol Downgrade Attack
    • og:description
      A flaw was recently found in OpenSSL that allowed for an attacker to negotiate a lower version of TLS between the client and server (CVE-2014-3511). While this vulnerability was quickly patched, an attacker that has control of your traffic can still simulate this attack today. Let’s explore how this is possible through looking at man-in-the-middle attacks and how browsers handle SSL/TLS connections. In addition, we will see the implications of the attack on cryptographic security.
    • og:url
      https://www.praetorian.com/blog/man-in-the-middle-tls-ssl-protocol-downgrade-attack/

  • Twitter Meta Tags

    7
    • twitter:card
      summary_large_image
    • twitter:creator
      @praetorianlabs
    • twitter:site
      @praetorianlabs
    • twitter:label1
      Written by
    • twitter:data1
      Harry Hayward

  • Link Tags

    24
    • EditURI
      https://www.praetorian.com/xmlrpc.php?rsd
    • alternate
      https://www.praetorian.com/feed/
    • alternate
      https://www.praetorian.com/comments/feed/
    • alternate
      https://www.praetorian.com/blog/man-in-the-middle-tls-ssl-protocol-downgrade-attack/feed/
    • alternate
      https://www.praetorian.com/wp-json/wp/v2/posts/945

Links

86