3
votes
Accepted
Was it true that google had used SSL only on external interfaces
According to the NSA, this was true:
"According to a post-it style note from the presentation, the
exploitation relied on the fact that (at the time at least) data was
transmitted unencrypted ...
- 155
1
vote
Is publishing CRLs over HTTP a potential vulnerability?
HTTP has weaknesses, although, only exploitable in a focused vector.
These can only be used until nextUpdate by serving the previous CRL. The first two need privileged access in the direct path ...
- 121
Only top scored, non community-wiki answers of a minimum length are eligible