The secure-renegotiation tag has no wiki summary.
3
votes
2answers
299 views
Not clear on ssl renegotiation vulnerabilty
When we read about TLS Renegotiation vulnerability, does it mean that a server is not supposed to ever accept renegotiation during a secure connection?
I thought that by renegotiation security is ...
0
votes
0answers
61 views
Email/Secure email sparsing [closed]
I am not an IT professional so please excuse the explanation of my problem:
We are using a CRM software on our server that allows us to email (contact info, notes, etc) directly from the software to ...
5
votes
4answers
792 views
Is MD5 considered insecure?
After all these articles circulating online about md5 exploits, I am considering switching to another hash algorithm. As far as I know it's always been the algorithm of choice among numerous DBAs. Is ...
3
votes
3answers
243 views
TLS Renegotiation Indication Extension vulnerability
I am trying to understand the TLS Renegotiation Indication Extension from the RFC.
I can understand that it is related to the fact that the renegotiation is send under the encrypted stream but can not ...
5
votes
1answer
421 views
How has TLS renegotiation been fixed?
I've read RFC 5746 on the TLS secure renegotiation extension. However, I don't understand how it fixes the problem.
Client and server are required to include the verify_data from the previous ...
