Tag Info

Hot answers tagged

5

Assuming that the keys used for the SSL and SSTP layers are independent (which they should be, since both layers have their own separate key setup processes), compromising the outer layer (SSTP) cannot make the inner layer (SSL) any less secure than it would be if used alone. To see why this is, imagine that there was an attack that did allow breaking SSL + ...


2

I'd like to add to Ilmari's answer. Specifically, Ilmari said: compromising the outer layer (SSTP) cannot make the inner layer (SSL) any less secure than it would be if used alone. which is exactly right - however, if the SSTP tunnel has been broken through whatever means the attacker can still pull off any attacks on your key distribution that may be ...



Only top voted, non community-wiki answers of a minimum length are eligible