+ - Google Prepares Fix to Stop BEAST SSL/TLS Attacks->
Submitted
by
OverTheGeicoE
OverTheGeicoE writes "It was reported yesterday that researchers had found a way to break the most commonly used SSL/TLS encryption in browsers. According to the Register, Google is pushing out a patch to fix the problem. The patch doesn't involve adding support for TLS 1.1 or 1.2. FTFA: "The change introduced into Chrome would counteract these attacks by splitting a message into fragments to reduce the attacker's control over the plaintext about to be encrypted. By adding unexpected randomness to the process, the new behavior in Chrome is intended to throw BEAST off the scent of the decryption process by feeding it confusing information." The fix is supposedly in the latest developer version of Chrome."
Link to Original Source
Link to Original Source
Google Prepares Fix to Stop BEAST SSL/TLS Attacks More Login
Google Prepares Fix to Stop BEAST SSL/TLS Attacks