2 ms·
"All versions (SSL3.0, TLS1.0, TLS1.1, TLS1.2) are affected." according to http://security.360.cn/cve/CVE-2016-8610/ http://security.360.cn/cve/CVE-2016-8610/
by kfreds 10y ago
"All versions (SSL3.0, TLS1.0, TLS1.1, TLS1.2) are affected." according to http://security.360.cn/cve/CVE-2016-8610/ http://security.360.cn/cve/CVE-2016-8610/
It would be helpful if the researchers clarified how potent this DoS attack vector is. Is sending "a large number of these large records" more efficient at denying availability than a naive flood using e.g. SYNs or UDP?
- Terribledactyl 10y agoThat's a per-site/victim question, how big is your pipe, how big is your CPU, what kind of networking devices do you offload traffic on?