3 ms·
Wrong. 1. TLS 1.2 is also vulnerable to the lucky thirteen attack. 2. The lucky thirteen attack requires CBC-mode.. which is also what generates the obsolete
by rgbrenner 10y ago
Wrong.
1. TLS 1.2 is also vulnerable to the lucky thirteen attack.
2. The lucky thirteen attack requires CBC-mode.. which is also what generates the obsolete crypto warning in chrome.
The solution here is clearly to disable CBC-mode.
http://www.isg.rhul.ac.uk/tls/TLStiming.pdf http://www.isg.rhul.ac.uk/tls/TLStiming.pdf