2 ms·

Survey Finds Secure Sites Not So Secure

• lsh123 15y ago
  BS. The BEAST attack requires first injecting JS into the browser which in turns requires being man-in-the-middle. After that all bets are off and there are easier ways to hack the system. Moreover, the only known solution on the server side - downgrading to RC4 (TLS 1.1+ is not supported on majority of the browsers). The cure is worse than the decease.