Tagged Questions
5
votes
2answers
4k views
Is BEAST really fixed in all modern browsers?
BEAST is said to be fixed in all modern browsers:
Chrome and Firefox
IE in Jan 2012
Opera in Dec 2011.
It's also fixed in OpenSSL since 2002.
Do these fixes mean that it's safe to use ciphers in ...
12
votes
4answers
2k views
TLS 1.0 JavaScript injection vulnerability (BEAST): what to do client-side?
With the alleged SSL/TLS vulnerabilities used by the BEAST exploit, there seems to be a security gap between TLS versions; TLS 1.0 being the problematic one but still the only option for many sites.
...
