Thread Rating:
  • 0 Vote(s) - 0 Average
  • 1
  • 2
  • 3
  • 4
  • 5
SSL/TLS: Renegotiation Vulnerability
#3
Hi,

I guess you've been using Indy server here is that correct?

From the issue:

> The referenced CVEs are affecting OpenSSL and Mozilla Network Security Services (NSS) but both are in a DISPUTED state

If you are using Indy (which uses OpenSSL) this will certainly affect your application. I think, once it is in disputed state, I believe you should just inform that you are using OpenSSL to provide SSL services.
Reply


Messages In This Thread
SSL/TLS: Renegotiation Vulnerability - by pgnair - 06-23-2023, 06:09 AM
RE: SSL/TLS: Renegotiation Vulnerability - by Alexandre Machado - 07-04-2023, 05:00 AM

Forum Jump:


Users browsing this thread: 1 Guest(s)