More Tricks For Defeating SSL In Practice

A Second Cut: updated sslsniffsslsniff●●●●Watches network and fingerprints clients forlevel of vulnerability.Every NSS client's communication isintercepted – either with a specific “nulltermination” certificate, or with the “universalwildcard” certificate.Every non-NSS client that is vulnerable isintercepted with a “null termination” certificate ifavailable for the destination host.Non-vulnerable clients are left alone to avoiddetection.Moxie MarlinspikeInstitute For Disruptive Studies