Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

My reading of this is that it only affects old, weak cipher suites that don't support forward secrecy, so only hosts that have an insecure configuration anyway are affected by this.


Note that some implementations re-use ephemeral keys on DHE, this was one of the finding of LOGJAM, and I'm not sure if this has been fixed in every TLS libraries.

https://raccoon-attack.com/




Consider applying for YC's Winter 2027 batch! Applications are open till November 2.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: