They can do similar by sharing a SSL(only on CBC?) socket and piping known plain... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

dekz on Sept 20, 2011 | parent | context | favorite | on: SSL broken. (TLS 1.0 cryptographic attack that ...

They can do similar by sharing a SSL(only on CBC?) socket and piping known plain-text into it. This doesn't mean TLS itself is broken.

marshray on Sept 20, 2011 [–]

Well TLS is supposed to protect you from that sort of thing. They fixed it in TLS 1.1 and 1.2.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact