2 ms·
On the other hand, these terminators also have problems with the split-first-record fix to the TLS 1.0 BEAST vulnerability, and that problem has to get fixed.
by gcp 15y ago
On the other hand, these terminators also have problems with the split-first-record fix to the TLS 1.0 BEAST vulnerability, and that problem has to get fixed.
Do you know if Google is going back on that as well? Can't tell from the article.
- tptacek 15y agoNot sure how you'd "go back on that". It's a vulnerability; it needs to be addressed.
- gcp 15y agoIf it breaks websites that your users require to work, like their bank, of course you can and must go back, security issues be damned. Google postponed BEAST mitigation several times because of this issue. I'm asking if they're reigning back on that or only on false start.