Black Hat 2011: SSL implementations are broken, says noted security researcher

Black Hat 2011: SSL implementations are broken, says noted security researcher

Date: Aug 08, 2011

Configuration issues and other errors mire the SSL implementations of thousands of legitimate websites, according to research conducted by SSL Labs, a research arm of Qualys Inc. Ivan Ristic, a noted developer of the open source Web application firewall ModSecurity and founder of SSL Labs, presented his findings at the Black Hat 2011 security conference. Ristic said organizations need to review their SSL implementations to correct many known issues. Protocol improvements being implemented by Google and other browser makers could help bolster SSL in the future, he said.

More on Network Protocols and Security