Want to read Slashdot from your mobile device? Point it at m.slashdot.org and keep reading!

 



Forgot your password?
typodupeerror
Check out the new SourceForge HTML5 internet speed test! No Flash necessary and runs on all devices. ×

Submission + - Researchers Find, Analyze Forged SSL Certs In The Wild

An anonymous reader writes: A group of researchers from Carnegie Mellon University and Facebook has managed to get a concrete sense of just how prevalent SSL man-in-the-middle attacks using forged SSL certificates are in the wild. Lead by Lin-Shung Huang, PhD candidate at Carnegie Mellon University and, during the research, an intern with the Facebook Product Security team, they have created a new method for websites to detect these attacks on a large scale: a widely-supported Flash Player plugin was made to enable socket functionalities not natively present in current browsers, so that it could implement a distinct, partial SSL handshake to capture forged certificates.
This discussion was created for logged-in users only, but now has been archived. No new comments can be posted.

Researchers Find, Analyze Forged SSL Certs In The Wild

Comments Filter:

Trying to be happy is like trying to build a machine for which the only specification is that it should run noiselessly.

Working...