3 ms·
am I vulnerable if I only use TLS 1.2?
by merb 8y ago
am I vulnerable if I only use TLS 1.2?
- tialaramex 8y agoYes. The only way to be invulnerable to this class of attack is of one of: 1. You never use RSA at all (the attack needs a server to be willing to do RSA decryption, but clients only need to be willing to do RSA for certificate verification) 2. Everything is "on premises". This is a cache timing attack and probably won't be practical even a short distance away over a network. 3. Server doesn't allow any version below TLS 1.3
- AstralStorm 8y ago2. Just like Spectre was not practical over the distance... Until you introduce the fact that browsers run JavaScript. 3. Almost all known servers accept TLS 1.2, and definitely banks.
- merb 8y agoActually what I mean is that my server only responds with TLS 1.2, nothing below or above. So I am still vulnerable to 1. and 2.?
- tialaramex 8y agoYes. Despite the HN title the article topic isn't really "We found a new problem in TLS 1.3" it's closer to "Bleichenbacher Oracles still exist in lots of TLS implementations, although in two of the nine we checked we couldn't find an Oracle". They only mention TLS 1.3 because otherwise uninformed people would say "Just upgrade to TLS 1.3" which won't fix the problem.
- merb 8y agoThanks. Still confusing title, guess best Would be tls 1.2,1.3
- chrisweekly 8y agoThank you; not OP but helpful summary.