« first day (4807 days earlier)      last day (153 days later) » 

16:35
1
Q: Preventing BEAST by using authorisation header instead of cookies

paj28Historical question as BEAST is mitigated in TLS 1.1 and earlier TLS is deprecated. BEAST is a chosen plaintext attack, possible in web browsers because cross-origin requests have cookies automatically attached. This puts both attacker-controlled data and sensitive data in the same encryption con...


« first day (4807 days earlier)      last day (153 days later) »