[White Paper] The easiest way to get around SSL
"Roberto Larcher" <[email protected]> Tue, 16 Sep 2003 17:46:21 +0200
| Newsgroups | gmane.comp.security.papers |
|---|---|
| Message-ID | <[email protected]> |
[Title] The easiest way to get around SSL [Abstract] This paper explains how it is often possible, with the simple substitution of a string, to get around a secure implementation based on an incorrect use of SSL. Please note that this document does not contain any information about weaknesses of the SSL protocol; it simply shows the easiest way to get around the correct functioning of the SSL protocol. In this document typical weakly secure implementation based on the SSL protocol are illustrated. A simple test application is also proposed to check if existing implementations are indeed weakly secure. This document has an informative purpose. [Links] English version http://webteca.altervista.org/download/download4.php?get=wp_https2http_en Italian version http://webteca.altervista.org/download/download4.php?get=wp_https2http_it [Contact Information] ing. Roberto Larcher robertolarcher (at) hotmail.com http://webteca.altervista.org _________________________________________________________________ Personalizza MSN Messenger con sfondi e fotografie! http://www.ilovemessenger.msn.it/