An Interest In:
Web News this Week
- April 19, 2024
- April 18, 2024
- April 17, 2024
- April 16, 2024
- April 15, 2024
- April 14, 2024
- April 13, 2024
Some of Our Sources
- Slashdot
- Techcrunch
- Pearsonified
- Spoon Graphics
- Smashing Apps
- Six Revisions
- Vandelay Design
- Inspiredology
- Freelance Switch
- Hashedout
Help Webnuz
Referal links:
September 24, 2015 10:00 pm
Original Link: http://rss.slashdot.org/~r/Slashdot/slashdot/~3/hGkXfjKBncE/modern-browsers-are-undefended-against-cookie-based-mitm-attacks-over-https
Modern Browsers Are Undefended Against Cookie-based MITM Attacks Over HTTPS
An anonymous reader writes: An advisory from CERT warns that all web-browsers, including the latest versions of Chrome, Firefox, Safari and Opera, have 'implementation weaknesses' which facilitate attacks on secure (HTTPS) sites via the use of cookies, and that implementing HSTS will not secure the vulnerability until browsers stop accepting cookies from sub-domains of the target domain. This attack is possible because although cookies can be specified as being HTTPS-specific, there is no mechanism to determine where they were set in the first place. Without this chain of custody, attackers can 'invent' cookies during man-in-the-middle (MITM) attacks in order to gain access to confidential session data.Read more of this story at Slashdot.
Original Link: http://rss.slashdot.org/~r/Slashdot/slashdot/~3/hGkXfjKBncE/modern-browsers-are-undefended-against-cookie-based-mitm-attacks-over-https
Share this article:
Tweet
View Full Article
Slashdot
Slashdot was originally created in September of 1997 by Rob "CmdrTaco" Malda. Today it is owned by Geeknet, Inc..More About this Source Visit Slashdot