The tag has no usage guidance.

learn more… | top users | synonyms

20
votes
6answers
16k views

Is MD5 considered insecure?

After all these articles circulating online about md5 exploits, I am considering switching to another hash algorithm. As far as I know it's always been the algorithm of choice among numerous DBAs. Is ...
3
votes
2answers
423 views

Why do browsers probe and fallback (or, why SSL_MODE_SEND_FALLBACK_SCSV)?

I've been following POODLE and the SSL_MODE_SEND_FALLBACK_SCSV TLS extension. I never really paid much attention to it, but it appears SSL_MODE_SEND_FALLBACK_SCSV is needed for clients like browsers ...
0
votes
1answer
22 views

Questions about “Triple Handshakes Considered Harmful Breaking and Fixing Authentication over TLS”

Recently I'm reading the paper "Triple Handshakes Considered Harmful Breaking and Fixing Authentication over TLS", and I have several questions unclear. First question: In TLS 1.2 standard, we can ...
0
votes
1answer
75 views

Triple handshake attack against TLS

Triple handshake attack was discovered lately, and to quote the article "The secure renegotiation indication extension only binds handshakes on the same connection, but does not apply if the session ...