GnuTLS patches huge security hole that hung around for two years – worse than Heartbleed, says Google cryptoboffin

GnuTLS, a widely used open source library implementing Transport Layer Security, last week fixed a bug that had been hiding in the code for almost two years that made resumed TLS 1.3 sessions vulnerable to attack. The TLS handshake requires two round-trips between client and server to establish a secure connection.

Read full article on The Register

 


Date:

Categorie(s):

Tag(s):