0

I am pondering about SSL Stripping attack. But is there any way to prevent this attack by DNSSEC or IPSEC?

1 Answer 1

1

DNSSec does only prevent SSL stripping if the man in the middle attack needed for the SSL stripping attack was done using DNS spoofing. If done the more common ways like ARP spoofing or DHCP spoofing or similar it does not prevent SSL stripping.

Similar IPSec does not prevent SSL stripping if the attacker is inside the same with IPSec protected network, i.e. using a system which is part of the network. It will only prevent SSL stripping if the attacker is not part of the IPSec network and only can see the already encrypted (with IPSec) traffic.

3

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .