TLSã«MITMã£ã¦è©±ã«é–¢ã™ã‚‹è‡ªåˆ†ãŒæ˜Žæ—¥è¦‹ã‚‹ãŸã‚ã®ãƒ¡ãƒ¢ - モスマン発端ã¯ã“れ。 http://extendedsubset.com/ è«–æ–‡ãã®ã‚‚ã®ã€TLSãƒã‚´ã‚·ã‚¨ãƒ¼ã‚·ãƒ§ãƒ³ã®å›³è§£ã€ã‚ャプãƒãƒ£ãƒ•ã‚¡ã‚¤ãƒ« ãã®è§£èª¬è¨˜äº‹ï¼šUnderstanding the TLS Renegotiation Attack - Educated Guesswork ã–ã£ãã‚Šã¨ã¾ã¨ã‚ã‚‹ã¨ã€TLSã®ãƒ—ãƒãƒˆã‚³ãƒ«ä»•æ§˜ãã®ã‚‚ã®ã«ã„ãã¤ã‹å•é¡ŒãŒã‚ã£ã¦ã€ç‰¹ã«ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆè¨¼æ˜Žæ›¸ã§èªè¨¼ã—ã¦ã„ã‚‹ã¨ã€MITMやられã¾ã™ã‚ˆçš„ãªå•é¡Œã‹ï¼Ÿ 発見者ã®ãã®å¾Œ 発見者é”ã®æ案「cryptographic bindingを強制ã—ã¾ã›ã‚“ã‹ã€ Marsh Ray (marshray) on Twitter å„ベンダーã®å¯¾å¿œ OpenSSLã¯openssl-0.9.8lã‚’11/5ã«å…¬é–‹ã€‚renegotiationをデフォルト無効ã«ã™ã‚‹ã€‚ Changes between 0.9.8k and 0.9.8l [5 Nov 20
SSL通信ã¸ã®ãƒªãƒ€ã‚¤ãƒ¬ã‚¯ãƒˆ - memo.xight.org
www.pseudonym.org - News
{{#tags}}- {{label}}
{{/tags}}