3 ms·
Doesn't this attack only apply to client authentication with renegotiation?
by swordswinger12 12y ago
Doesn't this attack only apply to client authentication with renegotiation?
- marklubi 12y agoFrom the write up at https://www.secure-resumption.com/ https://www.secure-resumption.com/, that appears to be a major limiting factor: > We have confirmed that our attacks can be mounted on popular web browsers and HTTPS libraries, when they are used to perform certificate-based authentication at servers that enable both resumption and renegotiation.