[tor-talk] New HTTP authorization attack

[Julie C]

On Tue, Aug 23, 2011 at 8:23 AM, Mike Perry <mikeperry at fscked.org> wrote:

>
> <snip>
>
> SSL certificates are not isolated. They might never be. The SSL stack
> is a nightmare.
>
>
Mike, can you provide some specifics on how the SSL stack is a nightmare? I
am working on development of an open source C-based libevent2-based
stand-alone SSL MiTM proxy but have not yet hit any of the ugly stuff.
Pointers to information would also be appreciated.

-- Julie C.
julie at h-ck.ca
GPG key FF4E2E70 available at http://keys.gnupg.net
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.torproject.org/pipermail/tor-talk/attachments/20110823/52988a4d/attachment.htm>