Timeline for Can MITM attacks now decrypt SSL & TLS traffic with POODLE vulnerability?
Current License: CC BY-SA 4.0
4 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Feb 19, 2020 at 3:37 | answer | added | CBHacking | timeline score: 3 | |
| Feb 19, 2020 at 3:20 | comment | added | dave_thompson_085 | POODLE was announced more than five years ago, and nearly all implementations dropped SSL3 within two years at most, so 'now' essentially no traffic is subject to it. For sites handling payment cards, which is nearly all retail or B2C, it has been prohibited almost four years. And even when it worked POODLE was MitM (active) but not 'sniffing' (passive). There are dozens of Qs on many Stacks from years ago explaining and discussing this. | |
| Feb 18, 2020 at 20:36 | answer | added | Ayush Ambastha | timeline score: 1 | |
| Feb 18, 2020 at 19:41 | history | asked | user227237 | CC BY-SA 4.0 |