[White Paper] The easiest way to get around SSL

"Roberto Larcher" <[email protected]> Tue, 16 Sep 2003 17:46:21 +0200
Newsgroups gmane.comp.security.papers
Message-ID <[email protected]>
[Title]
The easiest way to get around SSL

[Abstract]

This paper explains how it is often possible, with the simple
substitution of a string, to get around a “secure”
implementation based on an incorrect use of SSL.
Please note that this document does not contain any information
about weaknesses of the SSL protocol; it simply shows the easiest
way to get around the correct functioning of the SSL protocol.
In this document typical “weakly secure” implementation based on
the SSL protocol are illustrated.
A simple test application is also proposed to check if existing
implementations are indeed “weakly secure”.
This document has an informative purpose.

[Links]
English version
http://webteca.altervista.org/download/download4.php?get=wp_https2http_en

Italian version
http://webteca.altervista.org/download/download4.php?get=wp_https2http_it


[Contact Information]

ing. Roberto Larcher

robertolarcher (at) hotmail.com
http://webteca.altervista.org

_________________________________________________________________
Personalizza MSN Messenger con sfondi e fotografie! 
http://www.ilovemessenger.msn.it/