Advanced

New FREAK Attack Threatens Many SSL Clients

Posted by bob on · 3 comments
Threatpost; By Dennis Fisher
Mail this story
Print this story

For the nth time in the last couple of years, security experts are warning about a new Internet-scale vulnerability, this time in some popular SSL clients. The flaw allows an attacker to force clients to downgrade to weakened ciphers and break their supposedly encrypted communications through a man-in-the-middle attack.

Full Story

  Nav
» Read more about: Story Type: Editorial, Security; Groups: Community

» Get new stories by e-mail: nightly or as they are published

« Return to the newswire homepage

  Related stories
» More like this

Comments (3)

Can we stop with the fancy names/acronyms already?!
You need to join my long-ago-created anti-acronym group, CR@P. That's Curmudgeons Resisting Acronym Propagation. No admission fee, registration, or CAPTCHA nonsense! ;)
I read through the article, and there's nothing new in it. If you are vulnerable it just means you haven't been paying attention to your web server ssl settings. I typically use the latest settings and information on:

https://www.ssllabs.com/ssltest/

If your server has been reasonably configured in the last 12 months, you aren't going to vulnerable to the weak cipher or short key length problem. This is as true in 2000 as it is today.

Post a comment

A free account is needed to post. Write your comment here first: your text is kept in this browser while you sign up or log in, and is waiting for you when you come back.

Your message:
|||||
10
Markdown: **bold**, *italic*, [text](https://link), - lists, > quotes, $x^2$ for math. Formatting help

Sign up and post (it is free)  or  Log in and post