News for hackers. Stuff that matters.

A comment on GnuTLS TLS 1.3 session resumption works without master key, allowing MITM.

Re:GnuTLS TLS 1.3 session resumption works without master ke... by chaz6 on Sunday June 07, 2020 @03:15PM (#23449862)
This seems to be in the GnuTLS implementation and not the specification itself as the title led me to believe.
[ Parent | on HN ]
Re:GnuTLS TLS 1.3 session resumption works without master ke... by bpfrh on Sunday June 07, 2020 @03:17PM (#23449890)
Agreed, would be better if the title would be changed to "MITM flaw in Gnutls implementation of TLS 1.2 & 1.3"
[ Parent | on HN ]
Re:GnuTLS TLS 1.3 session resumption works without master ke... by dang on Sunday June 07, 2020 @03:49PM (#23450176)
Fixed now. Submitted title was "TLS 1.3 session resumption works without master key, allowing MITM"
[ Parent | on HN ]