IETF Logo Mail Archive

Re: [TLS] SSL Renegotiation DOS

"Jorge A. Orchilles" <jorge@orchilles.com> Fri, 18 March 2011 23:11 UTC

Return-Path: <jorge@orchilles.com>
X-Original-To: tls@core3.amsl.com
Delivered-To: tls@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id A6FFC3A6A92 for <tls@core3.amsl.com>; Fri, 18 Mar 2011 16:11:17 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.606
X-Spam-Level:
X-Spam-Status: No, score=-2.606 tagged_above=-999 required=5 tests=[AWL=0.370, BAYES_00=-2.599, FM_FORGED_GMAIL=0.622, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-1]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id uUFXoxri-tYI for <tls@core3.amsl.com>; Fri, 18 Mar 2011 16:11:16 -0700 (PDT)
Received: from mail-fx0-f44.google.com (mail-fx0-f44.google.com [209.85.161.44]) by core3.amsl.com (Postfix) with ESMTP id A9AE23A6A8D for <tls@ietf.org>; Fri, 18 Mar 2011 16:11:15 -0700 (PDT)
Received: by fxm15 with SMTP id 15so4459363fxm.31 for <tls@ietf.org>; Fri, 18 Mar 2011 16:12:45 -0700 (PDT)
Received: by 10.223.127.210 with SMTP id h18mr1923948fas.71.1300489965138; Fri, 18 Mar 2011 16:12:45 -0700 (PDT)
Received: from mail-fx0-f44.google.com (mail-fx0-f44.google.com [209.85.161.44]) by mx.google.com with ESMTPS id e17sm660716fak.0.2011.03.18.16.12.44 (version=SSLv3 cipher=OTHER); Fri, 18 Mar 2011 16:12:44 -0700 (PDT)
Received: by fxm15 with SMTP id 15so4459350fxm.31 for <tls@ietf.org>; Fri, 18 Mar 2011 16:12:43 -0700 (PDT)
MIME-Version: 1.0
Received: by 10.223.6.73 with SMTP id 9mr1575548fay.131.1300489603851; Fri, 18 Mar 2011 16:06:43 -0700 (PDT)
Received: by 10.223.98.205 with HTTP; Fri, 18 Mar 2011 16:06:43 -0700 (PDT)
In-Reply-To: <0F7F9A82BB0DBB4396A9F8386D0E0612066230A5@pos-exch1.corp.positivenetworks.net>
References: <AANLkTin2i3+K8oV68pZFJ0xabjEugJLePyZTTaZSr0VE@mail.gmail.com> <AANLkTimVvBOdX9JNXE+JyZS5vTHsXnfhQMAH2cTgTRfM@mail.gmail.com> <0F7F9A82BB0DBB4396A9F8386D0E061206623016@pos-exch1.corp.positivenetworks.net> <20110315153943.GA10156@redhat.com> <4D7F8A91.7030109@drh-consultancy.demon.co.uk> <0F7F9A82BB0DBB4396A9F8386D0E0612066230A5@pos-exch1.corp.positivenetworks.net>
Date: Fri, 18 Mar 2011 20:06:43 -0300
Message-ID: <AANLkTi=cwgiC4zUpeJzVeEEdV45uQsJkRc7iyJRZOxS8@mail.gmail.com>
From: "Jorge A. Orchilles" <jorge@orchilles.com>
To: Steve Dispensa <dispensa@phonefactor.com>
Content-Type: multipart/alternative; boundary="00151747b380df2747049ec9d4d9"
Cc: tls@ietf.org
Subject: Re: [TLS] SSL Renegotiation DOS
X-BeenThere: tls@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: "This is the mailing list for the Transport Layer Security working group of the IETF." <tls.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/tls>, <mailto:tls-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/tls>
List-Post: <mailto:tls@ietf.org>
List-Help: <mailto:tls-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/tls>, <mailto:tls-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 18 Mar 2011 23:11:17 -0000

Looks like Tor fixed that in 0.2.1.21
http://archives.seul.org/or/announce/Dec-2009/msg00000.html

Best Regards,
Jorge Orchilles



On Tue, Mar 15, 2011 at 1:03 PM, Steve Dispensa <dispensa@phonefactor.com>wrote:

> > -----Original Message-----
> > From: tls-bounces@ietf.org [mailto:tls-bounces@ietf.org] On Behalf Of
> Dr
> > Stephen Henson
> > On 15/03/2011 15:39, Joe Orton wrote:
> > >
> > > I recall a complaint that some mobile browser was known to initiate
> > > renegs, but I can't find a reference for that; it might have been
> > > off-line discussion.  I'd be interested to hear any further data on
> > > that.
> > >
> >
> > It was mentioned in the openssl-dev list a couple of times. The title
> was
> > "Renegotiation denied wrong?" around Nov 23rd 2009.
> >
> > Steve.
>
> Seems like tor also used client-initiated renegotiation, if memory
> serves. Don't know if that's still true.
>
>  -Steve
>
> _______________________________________________
> TLS mailing list
> TLS@ietf.org
> https://www.ietf.org/mailman/listinfo/tls
>

v2.23.0 | Report a Bug | By Email