Coming to a browser near you, new, post-quantum crypto.
Tag: https
Padding oracles and memory corruption threats caused by use of older schemes.
So SSL in general is having a rough time lately, now with the SSLv2 DROWN attack on TLS. And this is not long after Logjam and a while since Heartbleed, POODLE and FREAK. DROWN is a cross-protocol
New SSL/TLS vulnerability (CVE-2016-0800) could allow attackers to obtain encryption keys.
Read More →