[Ach] some thoughts on POODLE, BERserk etc.

[Hanno Böck]

Hi,

I thought the readers of this list might be interested, I did a quite
extensive writeup what I think are the lessons from the last two SSL
security issues POODLE and BERserk:
https://blog.hboeck.de/archives/858-Dancing-protocols,-POODLEs-and-other-tales-from-TLS.html

cu,
-- 
Hanno Böck
http://hboeck.de/

mail/jabber: hanno at hboeck.de
GPG: BBB51E42
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 819 bytes
Desc: not available
URL: <http://lists.cert.at/pipermail/ach/attachments/20141104/3001fc6b/attachment.sig>