<html>
<head>
<meta content="text/html; charset=UTF-8" http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
Ma questo sarebbe la stessa tecnica sslstrip[1] oppure si tratta di
una cosa diversa?<br>
<br>
[1]: <a href="http://www.thoughtcrime.org/software/sslstrip/">http://www.thoughtcrime.org/software/sslstrip/</a><br>
<br>
<br>
Il 05/10/2011 15.58, Clauz ha scritto:
<blockquote cite="mid:4E8C62A2.80204@ninux.org" type="cite">
<pre wrap="">Hanno craccato SSL! Quindi occhio quando andate sui siti delle banche &
co che usino versioni superiori a TLS 1.0 o SSL 3.1. E se proprio usano
queste versioni controllate che usino rc4. Altrimenti meglio non fare il
login!
<a class="moz-txt-link-freetext" href="http://www.theregister.co.uk/2011/09/19/beast_exploits_paypal_ssl/">http://www.theregister.co.uk/2011/09/19/beast_exploits_paypal_ssl/</a>
<a class="moz-txt-link-freetext" href="https://secure.wikimedia.org/wikipedia/en/wiki/Transport_Layer_Security#TLS_1.0_.28SSL_3.1.29">https://secure.wikimedia.org/wikipedia/en/wiki/Transport_Layer_Security#TLS_1.0_.28SSL_3.1.29</a>
<a class="moz-txt-link-freetext" href="https://www.schneier.com/blog/archives/2011/09/man-in-the-midd_4.html">https://www.schneier.com/blog/archives/2011/09/man-in-the-midd_4.html</a>
bella,
Clauz
</pre>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">_______________________________________________
Not-wireless mailing list
<a class="moz-txt-link-abbreviated" href="mailto:Not-wireless@ml.ninux.org">Not-wireless@ml.ninux.org</a>
<a class="moz-txt-link-freetext" href="http://ml.ninux.org/mailman/listinfo/not-wireless">http://ml.ninux.org/mailman/listinfo/not-wireless</a>
</pre>
</blockquote>
<br>
</body>
</html>