Novel Terrapin attack uses prefix truncation to downgrade the security of SSH channels.
  • Eager Eagle@lemmy.worldOPEnglish
    54·
    11 months ago

    I won’t pretend I know better than the paper authors, what I can say is that some fixes are not incremental.

    There are cases that mature tools and protocols should be left behind, and the danger lies exactly in using a protocol that was designed in the web 1.0 era.