4 ms·
Actually what I mean is that my server only responds with TLS 1.2, nothing below or above. So I am still vulnerable to 1. and 2.?
by merb 8y ago
Actually what I mean is that my server only responds with TLS 1.2, nothing below or above.
So I am still vulnerable to 1. and 2.?
- tialaramex 8y agoYes. Despite the HN title the article topic isn't really "We found a new problem in TLS 1.3" it's closer to "Bleichenbacher Oracles still exist in lots of TLS implementations, although in two of the nine we checked we couldn't find an Oracle". They only mention TLS 1.3 because otherwise uninformed people would say "Just upgrade to TLS 1.3" which won't fix the problem.
- merb 8y agoThanks. Still confusing title, guess best Would be tls 1.2,1.3