ie8 fix
madison

Discussion on:
Zero-day flaw found in web encryption

View entire thread
Message 1 of 1
Next »
0 Votes
+ -
Bad one
honeymonster 5th Nov 2009
Because the bug is actually in the spec (and
because of an incomplete spec) there is no
obvious solution which will not risk breaking a
lot of software.

On the positive side, the vuln can only be
exploited by someone on the network path (it is
a man-in-the-middle attack), which means that
your network admin, the admins at your ISP (and
intelligence services) etc. can use this to
snoop on traffic, but a malicious site can not.
ie8 fix
Click Here
ie8 fix

The best of ZDNet, delivered

ZDNet Newsletters

Get the best of ZDNet delivered straight to your inbox

ie8 fix