serious flaws in software that uses the SSL

Attention: TDR Forum Junkies
To the point: Click this link and check out the Front Page News story(ies) where we are tracking the introduction of the 2025 Ram HD trucks.

Thanks, TDR Staff

From Retired Uncle

Thoughts on Solar Powered Roof Vents

Oh Boy this is great... ... .....



Black Hat 2009: More Holes in Web's SSL Security Protocol - CSO Online - Security and Risk



July 30, 2009 — IDG News Service —



Security researchers have found some serious flaws in software that uses the SSL (Secure Sockets Layer) encryption protocol used to secure communications on the Internet.



At the Black Hat conference in Las Vegas on Thursday, researchers unveiled a number of attacks that could be used to compromise secure traffic travelling between Web sites and browsers.



This type of attack could let an attacker steal passwords, hijack an on-line banking session or even push out a Firefox browser update that contained malicious code, the researchers said.



The problems lie in the way that many browsers have implemented SSL, and also in the X. 509 public key infrastructure system that is used to manage the digital certificates used by SSL to determine whether or not a Web site is trustworthy.
 
Back
Top