DROWN - New attack on TLS

[zhang888 1066]

https://drownattack.com

 

As usual: read, learn, patch

 

P.S.

Air was not vulnerable to it from the start.

[Staff 9972]

Hello!

 

Before a thousand users ask : no, OpenVPN does NOT support SSLv2 / v3, so this attack is inessential for OpenVPN.

 

Kind regards

[zhang888 1066]

Once again LibreSSL proved itself to be immune from this among other 2 vulnerabilities fixed in OpenSSL in the latest patch.

Unlike many of OpenBSD's projects, this one definitely looks both usability and security proof

 

http://undeadly.org/cgi?action=article&sid=20160301141941

[rickjames 106]

Once again LibreSSL proved itself to be immune from this among other 2 vulnerabilities fixed in OpenSSL in the latest patch.

Unlike many of OpenBSD's projects, this one definitely looks both usability and security proof

 

http://undeadly.org/cgi?action=article&sid=20160301141941

 

I <3 OpenBSD

[OpenSourcerer 1435]

You know the bugs get serious when they are given names which have to do with misadventure, death, serious injury, fluffy animals, or a combination of such items.

 

This o.O