SSL/TLS Flaws (Link Page)

Some links to follow if you would like:

• The horsey is infected.

• Wikipedia on TLS

• Null Prefix Attack:
  • Moxie Marlinspike's article.

  • Wired article (with Moxie pic).

  • Register article about Moxie's PayPal suspension.

  • CVE-2009-2408 (NSS)

  • CVE-2009-2510 (Windows Crypto API)

  • CVE-2009-3477 (Blackberry Browser)

  • CVE-2009-3490 (GNU wget)

  • etc., etc.

• Renegotiation Bug
  • Article by Marsh Ray and Steve Dispensa

  • Pretty Picture Paper.

  • Moxie says it's impractical

  • Mr Kurmus begs to differ with Moxie.

  • CVE-2009-3555

Last modified: 2009-11-18 08:47 EST Paul A. Sand pas@unh.edu