nanog mailing list archives

Re: OpenSSL


From: "Petri Helenius" <pete () he iki fi>
Date: Tue, 18 Mar 2003 17:09:58 +0200



While the timing attack is the attack against the SSL server, it is my
reading of the paper that the attacks' success largely depends on ability to
tightly control the time it takes to communicate with a service using SSL.
Currently, such control is rather difficult to achive on links other than
ethernet.

Doesn´t MPLS provide consistent delay and minimal jitter and thus SSL
servers connected to MPLS networks are more suspectible to attack?










:-)

Pete


Current thread: