mun.ohjain.fi

links that caught my eye and some words scrambled together ..maybe

THC-SSL-DoS is a tool to verify the performance of SSL.

Posted on | October 26, 2011 | No Comments

Establishing a secure SSL connection requires 15x more processing
power on the server than on the client.

THC-SSL-DOS exploits this asymmetric property by overloading the 
server and knocking it off the Internet.

This problem affects all SSL implementations today. The vendors are aware
of this problem since 2003 and the topic has been widely discussed.

This attack further exploits the SSL secure Renegotiation feature
to trigger thousands of renegotiations via single TCP connection.
read more

Comments

Leave a Reply