5 ms·
The DH fix was just a sanity check and are not sufficient to prevent pre-master secret fixation with DH handshakes. Firefox enforces that the renegotiation cer
by agl 13y ago
The DH fix was just a sanity check and are not sufficient to prevent pre-master secret fixation with DH handshakes.
Firefox enforces that the renegotiation certificate chain are valid for the site name which solves the renegotiation issue.