Live data from Hacker News

Every Byte of a TLS Connection Explained and Reproduced

tls.ulfheim.net

101–104 of 104 posts

Re: Every Byte of a TLS Connection Explained and Reproduced

#101

Earlier quoted context omitted.

Moreover, from a security perspective since we're talking about TLS, "overspecified" and/or "redundant" lengths are just begging to be made inconsistent and a source of vulnerabilities.

Usually if you mess up something there your implementation just doesn't work.

Vulnerabilities often arise from implementation bugs, no?

Re: Every Byte of a TLS Connection Explained and Reproduced

#102

Earlier quoted context omitted.

Usually if you mess up something there your implementation just doesn't work.

Vulnerabilities often arise from implementation bugs, no?

Yeah, but not every implementation details will equally lead to the same vulnerabilities. Having said that, heartbleed was a length issue.
Post reply on HN