Protocol downgrades, also known as downgrade attacks, bidding down attacks and rollback attacks, is when a computer system is coaxed into abandoning a high quality mode of operation in favour of a lower quality mode of operation.
A historical example was a flaw in
OpenSSL that enabled an attacker to use a lower version of TLS between client and server.
No comments:
Post a Comment