06/12/2017
How can we prepare for emerging TLS v1.3 deployments?
Malicious attackers are already using fuzzing. We should too. The history of Secure Sockets Layer (SSL) and its successor Transport Layer Security (TLS) have been marked by significant cryptographic breaks and implementation flaws with exploits wreaking havoc upon enterprises and the public. TLSv1.3 is a huge leap forward for web based encrypted communication with improved security, and performance compared to its predecessors. TLSv1.3 improves robustness of crypto support by removing obsolete and insecure features from TLSv1.2. Removal of these features result in TLSv1.3 protocol being more simplified and therefore reducing chances of exposure to the underlying vulnerabilities. Besides...
