"We have demonstrated a variety of attacks against implemen-tations of (D)TLS. We reiterate that the attacks are ciphertext-only, and so can be carried out by t

"We have demonstrated a variety of attacks against implemen-tations of (D)TLS. We reiterate that the attacks are ciphertext-only, and so can be carried out by the standard MITM attacker, without a chosen-plaintext capability."