3 ms·
That's in the ideal "system is performing exactly as intended" case, though. You're assuming that there isn't, for example, a timing attack on the string compa
by TheLoneWolfling 12y ago
That's in the ideal "system is performing exactly as intended" case, though.
You're assuming that there isn't, for example, a timing attack on the string comparison function. And it doesn't have to be just their server either. It could be, for example, an intermediate proxy server that leaks timing information.
- gus_massa 12y agoYes, I suspect the more probable leaks are dew to malware and mistakes (someone want to post a kittens picture, but he makes a mistake and paste the doc url.) And your comment is interesting. Are the proxy servers expected to be secure against a timing attack? (Also, the proxy administrator may be able to see the logs ...)