SSL/TLS weakness to be fixed

Hackers have been able to inject their own packets into SSL and TLS connections for nearly one year. Looks like there may be a solution to come.

Solution for SSL/TLS design weakness in sight

via The H Security on 1/12/10

When implemented, a new specification extension to the TLS protocol will fix the TLS renegotiation vulnerability discovered last year and prevent attackers from injecting arbitrary packets into secure connections

Posted via email from Encryption Protected USB Technologies