4 ms·
Is this new? Since I would say it's already widely known as a ssl Downgrade attack. https://en.wikipedia.org/wiki/Downgrade_attack https://en.wikipedia.org/wik
by neoeldex 11y ago
Is this new? Since I would say it's already widely known as a ssl Downgrade attack.
https://en.wikipedia.org/wiki/Downgrade_attack https://en.wikipedia.org/wiki/Downgrade_attack
- CJefferson 11y agoNope, this is different. Your machine can not support SSLv2 at all (so you couldn't be downgraded), but the existence of SSLv2 on the server (or a different server running SSLv2, say an e-mail server) allows the attack.