News for hackers. Stuff that matters.

A comment on Google disables compression for OpenSSL in Chrome - SSL exploit coming?. Parent comment

Re:Google disables compression for OpenSSL in Chrome - SSL e... by jgeralnik on Thursday September 13, 2012 @07:22AM (#4515595)
You can't read the cookie for the victim website from a malicious site. What you can do is send POST/GET requests to which the browser will attach the appropriate cookies.
[ Parent | on HN ]
Re:Google disables compression for OpenSSL in Chrome - SSL e... by murbard2 on Thursday September 13, 2012 @09:51AM (#4516104)
Oops, yes of course, now I feel stupid for asking. Thanks.
[ Parent | on HN ]