Timeline for Is LibreSSL affected? - Downgrade Attack on TLS 1.3
Current License: CC BY-SA 4.0
7 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Feb 25, 2019 at 11:14 | vote | accept | cirka547 | ||
| Feb 8, 2019 at 15:33 | answer | added | Frank Denis | timeline score: 0 | |
| Feb 8, 2019 at 12:29 | comment | added | Steffen Ullrich | You are referencing various CVE which are not related to a TLS 1.3 downgrade but your title only asks about TLS 1.3 downgrade. Please make clear what you actually want to know. As for what you ask in the title: LibreSSL is not affected by TLS 1.3 downgrade since it does not support TLS 1.3 yet. | |
| Feb 8, 2019 at 11:32 | comment | added | kelalaka | For editing: I've tried to change the links as title and link but both have the same title. Better use our site's question? | |
| Feb 8, 2019 at 11:30 | comment | added | kelalaka |
The authors didn't test it. Actually as pointed out Gilles in the comments of this answer surely the first mitigation should be keeping your system up-to-date? Therefore if you don't support TLS 1.2 you are safe.
|
|
| Feb 8, 2019 at 10:50 | review | First posts | |||
| Feb 8, 2019 at 10:58 | |||||
| Feb 8, 2019 at 10:49 | history | asked | cirka547 | CC BY-SA 4.0 |