Re:SSL broken. (TLS 1.0 cryptographic attack that works. ...
by alecco on Tuesday September 20, 2011 @03:38PM
(#3019244)
No, the attack is against SSL and Man-in-the-Middle. They just make the browser send SSL requests with those cookies, and then guess the cookie (sent inside the SSL session).
[ Parent
| on HN ]
There are no comments on this comment yet.