Tag:

SSL

Latest Headlines

Latest Headlines

Researchers propose enhancement to make SSL more secure

Two researchers have submitted a draft proposal to the Internet Engineering Task Force to strengthen the ubiquitous SSL system against fraudulent certificates such as those created after Dutch certificate authority DigiNotar experienced a security breach last year.

Hacking group releases new DDoS attack against SSL

A German hacking group called The Hacker's Choice has released an attack tool called THC-SSL-DOS that it claims allows the resources of a single PC to take down a web server. What it essentially does

Security flaw in cloud architectures including Amazon Web Services

Security researchers from Germany's Ruhr University have uncovered flaws in Amazon Web Services that allowed them to gain administrative rights and access user data. While the vulnerabilities in AWS

Microsoft issues advisory about SSL/TLS vulnerability, promises patch

Microsoft ( NASDAQ: MSFT ) has issued a security advisory about a new exploit that can be used to decrypt SSL and TLS web traffic as part of a man-in-the-middle attack. The advisory came in the wake of

HTTPS vulnerable to man-in-the-middle attacks

The secure sockets layer (SSL) and the most widely-used versions of the transport layer security (TLS) encryption protocols are vulnerable to a flaw previously thought to be unexploitable. So say

Google, Mozilla, Microsoft blacklist DigiNotar, but Apple remains silent

The digital break-in at certificate authority DigiNotar continues to send shockwaves across the globe even as the company suspended sales in the wake of the revelation that hundreds of fraudulent

Report: Improper SSL implementations are widespread

Improperly configured SSL implementations are rendering SSL "nearly useless" and exposing sensitive information. Quoting from a report released by Qualys at the recent Black Hat security conference,

Software for fast, low-cost SSL proxy servers under development

Software developed by some researchers in South Korea and the United States could eventually herald the use of SSL proxies based on commodity hardware to protect transactions conducted with websites.

Chrome extension will enable secure Google searches

Worried about the information you are leaking via unencrypted web searches but too absent-minded to remember typing the correct link to invoke your SSL search engine of choice? Well, Google ( NASDAQ:

Study: Users ignoring security warnings

A new study by Carnegie Mellon University has shown that users have developed an immunity of sorts to the warnings generated by invalid security certificates. What they found is that users are