HTTPS SSL encryption is vulnerable

Sheesh is there ever not a vulnerability in something online :/ seems even the things you trust can no longer be trusted.
 
90% of encryption schemes can be cracked by a man-in-the-middle attack. With encryption, the biggest difficulty always has been a secure key exchange. Fact of the matter is, it's highly unlikely that anyone can establish a successfull man-in-the-middle position before any key exchange happens unless the server and/or client is compromised.
 
UnUnOctium said:
90% of encryption schemes can be cracked by a man-in-the-middle attack. With encryption, the biggest difficulty always has been a secure key exchange. Fact of the matter is, it's highly unlikely that anyone can establish a successfull man-in-the-middle position before any key exchange happens unless the server and/or client is compromised.
Click to expand...

what about if the transfer medium is wireless ?
 
One contains code that must be loaded into the victim's web browser and the second one captures and decrypts HTTPS session cookies.
Click to expand...

This is old news. Known-plaintext attacks against SSL have been out in the open for years.

And there are easier (and faster and more reliable) ways to compromise a user than this.
 
You must log in or register to reply here.
Back
Top
Sign up to the MyBroadband newsletter
X