Analysis of Preventing Tampering HTTPS
In Black Hat DC 09, Moxie Marlinspike, Independent Security Expert, explained how he moved round SSL Security mechanism to get the information of users’ credit cards and other account. According to his description, the websites with SSL are not encrypted wholly. The websites only use SSL in some important pages, so an opportunity is given to attackers.
Please click here for details>>> |