在 2011-09-21三的 10:58 +0200，Jędrzej Nowak写道： > It's not *new* address of Alvaro :) > > > Greetings, > Jędrzej Nowak > > > > On Wed, Sep 21, 2011 at 10:52 AM, Sharl.Jimh.Tsin <[email protected]> > wrote: > > 在 2011-09-20二的 11:09 +0200，Alvaro Lopez Ortega写道： > >> Folks, > >> > >> > >> You ought to be aware of this if you site relays on TLS 1.0: > >> > >> > >> "... The vulnerability resides in versions 1.0 and earlier of TLS, or > >> transport layer security, the successor to the secure sockets layer > >> technology that serves as the internet's foundation of trust. Although > >> versions 1.1 and 1.2 of TLS aren't susceptible, they remain almost > >> entirely unsupported in browsers and websites alike." > >> > >> > >> "... requires about two seconds to decrypt each byte of an encrypted > >> cookie. That means authentication cookies of 1,000 to 2,000 characters > >> long will still take a minimum of a half hour for their PayPal attack > >> to work. Nonetheless, the technique poses a threat to millions of > >> websites that use earlier versions of TLS" > >> > >> > >> http://www.theregister.co.uk/2011/09/19/beast_exploits_paypal_ssl/ > >> > >> > >> > >> -- > >> Greetings, alo. > >> http://www.alobbs.com/ > >> _______________________________________________ > >> Cherokee mailing list > >> [email protected] > >> http://lists.octality.com/listinfo/cherokee > > > > wow,your new email address is so COOL~ how did you get it? are you a > > member of GNU project? Alvaro Lopez Ortega.(sorry for OT) > > > > -- > > Best regards, > > Sharl.Jimh.Tsin (From China **Obviously Taiwan INCLUDED**) > > > > Using Gmail? Please read this important notice: > > http://www.fsf.org/campaigns/jstrap/gmail?10073. > > > > _______________________________________________ > > Cherokee mailing list > > [email protected] > > http://lists.octality.com/listinfo/cherokee > > > >
this is my first time to discovery it :( -- Best regards, Sharl.Jimh.Tsin (From China **Obviously Taiwan INCLUDED**) Using Gmail? Please read this important notice: http://www.fsf.org/campaigns/jstrap/gmail?10073.
signature.asc
Description: This is a digitally signed message part
_______________________________________________ Cherokee mailing list [email protected] http://lists.octality.com/listinfo/cherokee
