Re: GnuTLS session resumption exploit

Top Page
Attachments:
Message as email
+ (text/plain)
+ (text/html)
+ (text/plain)
Delete this message
Reply to this message
Author: Seabass
Date:  
To: plug-discuss
CC: Seabass
Subject: Re: GnuTLS session resumption exploit
What exactly is gnutls used for?
Web servers, or do general users actually use this for TLS connections?
Or something else?

> moin moin,
>
> GnuTLS sessions can be resumed, allowing man in the middle attacks
>
> get yer updates
>
> https://gitlab.com/gnutls/gnutls/-/issues/1011
>
> ciao,
>
> der.hans
---------------------------------------------------
PLUG-discuss mailing list -
To subscribe, unsubscribe, or to change your mail settings:
https://lists.phxlinux.org/mailman/listinfo/plug-discuss