5 ms·
That's if you look at major PUBLICIZED attacks on TLS endpoints. It's quite plausible that the people who've found (i.e. are looking for) attacks based on incor
by smitherfield 5y ago
That's if you look at major PUBLICIZED attacks on TLS endpoints. It's quite plausible that the people who've found (i.e. are looking for) attacks based on incorrect crypto aren't publicizing them.
- staticassertion 5y agoSure, but there's no evidence of that.
- smitherfield 5y agoNo evidence? We know for a fact that US, Russian, Chinese, British, Israeli etc. intelligence agencies are looking for crypto vulnerabilities, and we know for a fact that they do not publicize the vulnerabilities they find.
- staticassertion 5y agoYes, I'm aware of many, many people looking for crypto vulnerabilities. I'm not aware of many exploits in the wild.