Enabling SSL/TLS Renegotiation in Java
All the crazy SSL servers seem to come my way - ones that only support weird combinations of protocols and ciphers, ones that require client certificates stored on PKCS#11 hardware, and ones that...
View ArticleImpact of TLS/SSL Renegotiation Vulnerability on HTTPS: Less Known Issues
There is a couple of issues with TLS/SSL renegotiation vulnerability in the context of HTTPS protocol, which appear not to have made their way to the public. 1. Plain text prefix injection is not the...
View Article
More Pages to Explore .....