News for hackers. Stuff that matters.

A comment on BitTorrent v2. Parent comment

Re:BitTorrent v2 by stingraycharles on Monday September 07, 2020 @04:52PM (#24402748)
Isn’t the fact that OpenSSL et al allow so many arbitrary ciphers the reason of a whole load of problems?
[ Parent | on HN ]
Re:BitTorrent v2 by loeg on Monday September 07, 2020 @05:36PM (#24403132)
Yep: https://en.wikipedia.org/wiki/Downgrade_attack

> Downgrade attacks have been a consistent problem with the SSL/TLS family of protocols; examples of such attacks include the POODLE attack.

[ Parent | on HN ]
Re:BitTorrent v2 by user5994461 on Monday September 07, 2020 @04:59PM (#24402820)
Nope, the problem is that software never upgrade their ssl stack to support the newer ciphers. Especially Microsoft that's easily 10 years behind on the current SSL version.

Without the ability to support multiple versions, it would be impossible to upgrade anything at all. That would be a whole load of other problems.

[ Parent | on HN ]