I saw this video in which the guy talks about ways to defeat SSL. But the video is 4 years old. I wanted to know if these attacks are relevant even now, or some updates have been made to tackle these.
The two different attacks(or tools) he talked about in the video are
SSL-Strip: Its like man in the middle in certificate chain
orin some cases without certificate chain. It can work by taking advantage of null-prefixed certificates.
SSL-Sniff: Monitors the transition/redirection of webpage from http to https version.
I guess SSL-Strip attack should be relevant even now. I am a newbie to the ssl protocol, so forgive me if I have a wrong understanding of it. Any good reading materials on the same would be appreciated.