http://support.apple.com/kb/HT6147 "Description: Secure Transport failed to validate the authenticity of the connection. This issue was addressed by restoring missing validation steps."
Addition (technical) information:
- https://www.imperialviolet.org/
- https://news.ycombinator.com/item?id=7281378
- http://www.reddit.com/r/netsec/comments/1ykt3t/ssltls_authenticity_checks_broken_in_apple_ios/
More (general audience) information:
- http://www.zdnet.com/major-apple-security-flaw-patch-issued-users-open-to-mitm-attacks-7000026624/
- http://www.theregister.co.uk/2014/02/21/apple_patches_ios_ssl_vulnerability/
No comments:
Post a Comment