Hacker Newsnew | past | comments | ask | show | jobs | submitlogin
Survey Finds Secure Sites Not So Secure (threatpost.com)
2 points by pwg on April 28, 2012 | hide | past | favorite | 1 comment


BS. The BEAST attack requires first injecting JS into the browser which in turns requires being man-in-the-middle. After that all bets are off and there are easier ways to hack the system.

Moreover, the only known solution on the server side - downgrading to RC4 (TLS 1.1+ is not supported on majority of the browsers). The cure is worse than the decease.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: