Skip to content

Month: March 2016

Don’t DROWN! – Avoiding the TLS/SSL vulnerability

What is it? DROWN (Decrypting RSA with Obsolete and Weakened eNcryption) is a recently discovered (March 2016) vulnerability in SSL/TLS which can allow attackers to break the security SSL and TLS are supposed to provide and acquire the newly decrypted data. The flaw exploits servers which still support encryption services…

Leave a Comment