oss-sec mailing list archives

Re: CVE-2009-3555 for TLS renegotiation MITM attacks

From: ArkanoiD <ark () eltex net>
Date: Mon, 9 Nov 2009 00:54:43 +0300

BTW renegotiation handshake looks quite similar to initial handshake from
the client point of view; is there a way to detect the attack on client side
and drop the connection?

Current thread:

CVE-2009-3555 for TLS renegotiation MITM attacks Mark J Cox (Nov 05)
- Re: CVE-2009-3555 for TLS renegotiation MITM attacks Florian Weimer (Nov 05)
- Re: CVE-2009-3555 for TLS renegotiation MITM attacks Eygene Ryabinkin (Nov 06)
  - Re: [TLS] [oss-security] CVE-2009-3555 for TLS renegotiation MITM attacks Marsh Ray (Nov 07)
    - Re: [TLS] [oss-security] CVE-2009-3555 for TLS renegotiation MITM attacks Peter Gutmann (Nov 08)
  - Re: CVE-2009-3555 for TLS renegotiation MITM attacks ArkanoiD (Nov 08)
    - Re: [TLS] [oss-security] CVE-2009-3555 for TLS renegotiation MITM attacks Marsh Ray (Nov 08)