Five Ways to Screw Up SSL
Source: Fr33d0m - Posted by Benjamin D. Thomas   
Server Security SSL is a wonderful protocol, but it is frequently used badly. This note is intended to point out some of the more common errors made by applications using SSL. This checklist should be useful for application developers, system administrators, and the occasional penetration tester. This note assumes you have at least a casual knowledge of SSL, but is not a paper about cryptography. If you know enough to write an SSL library, you will know every single one of the mistakes I mention below, plus a few more. Still, I hope that those of you who are writing SSL toolkits will consider why these mistakes are made. Perhaps it will help you design your toolkits so that novices use them correctly.

Read this full article at Fr33d0m

Only registered users can write comments.
Please login or register.

Powered by AkoComment!