2 ms·
The bug report downplays the severity of the problem. This comment comes the closest to explaining the severity: > ticket encryption key and decryption key ar
by agwa 6y ago
The bug report downplays the severity of the problem. This comment comes the closest to explaining the severity:
> ticket encryption key and decryption key are all-zero [...] in TLS 1.2, it may allow attackers to recover the previous conversations
https://gitlab.com/gnutls/gnutls/-/issues/1011#note_353830633 https://gitlab.com/gnutls/gnutls/-/issues/1011#note_35383063...