3 ms·
https://community.qualys.com/blogs/securitylabs/2011/10/17/mitigating-the-beast-attack-on-tls https://community.qualys.com/blogs/securitylabs/2011/10/17/m... >
by alextgordon 11y ago
https://community.qualys.com/blogs/securitylabs/2011/10/17/mitigating-the-beast-attack-on-tls https://community.qualys.com/blogs/securitylabs/2011/10/17/m...
> During the summer rumours about a new attack against SSL started circulating.
> The only reliable way to defend against BEAST is to prioritise RC4 cipher suites, as proposed by PhoneFactor.
RC4? That heap of junk? You're kidding.
[18 months later]
> Last week, a group of researchers announced significant advancements in the attacks against RC4, unveiling new weaknesses as well as new methods to exploit them.
Jeez, who could have seen that one coming.