New FREAK Attack Threatens Many SSL Clients
|
|
|
Comments (3)
Can we stop with the fancy names/acronyms already?!
You need to join my long-ago-created anti-acronym group, CR@P. That's Curmudgeons Resisting Acronym Propagation. No admission fee, registration, or CAPTCHA nonsense! ;)
I read through the article, and there's nothing new in it. If you are vulnerable it just means you haven't been paying attention to your web server ssl settings. I typically use the latest settings and information on:
https://www.ssllabs.com/ssltest/
If your server has been reasonably configured in the last 12 months, you aren't going to vulnerable to the weak cipher or short key length problem. This is as true in 2000 as it is today.
https://www.ssllabs.com/ssltest/
If your server has been reasonably configured in the last 12 months, you aren't going to vulnerable to the weak cipher or short key length problem. This is as true in 2000 as it is today.
Post a comment
A free account is needed to post. Write your comment here first: your text is kept in this browser while you sign up or log in, and is waiting for you when you come back.
Your message:Markdown: **bold**, *italic*, [text](https://link), - lists, > quotes, $x^2$ for math. Formatting help
Sign up and post (it is free) or Log in and post
