I am guessing that they are able to bypass this restriction. | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

itsnotvalid on Sept 20, 2011 | parent | context | favorite | on: SSL broken. (TLS 1.0 cryptographic attack that ...

I am guessing that they are able to bypass this restriction.

alecco on Sept 20, 2011 [–]

No, the attack is against SSL and Man-in-the-Middle. They just make the browser send SSL requests with those cookies, and then guess the cookie (sent inside the SSL session).

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact