> We show that a network attacker who can monitor a long-lived Triple-DES HTTPS connection between a web browser and a website can recover secure HTTP cookies b

> We show that a network attacker who can monitor a long-lived Triple-DES HTTPS connection between a web browser and a website can recover secure HTTP cookies by capturing around 785 GB of traffic. > In our proof-of-concept demo, this attack currently takes less than two days, using malicious Javascript to generate traffic. > Keeping a web connection alive for two days may not seem very practical, but it worked easily in the lab. Oooookay...