"New TLS Attack Lets Attackers Launch Cross-Protocol Attacks Against Secure Sites"

[Mark S. Miller]

Relevance of https://thehackernews.com/2021/06/new-tls-attack-lets-attackers-launch.html ?

--

  Cheers,
  --MarkM

[Tony Arcieri]

It's ultimately making the case for things like ALPN and SNI.

Although there's much simpler "doctor it hurts when I..." mitigations: don't reuse keys (and also don't use FTPS, but especially don't reuse keys for HTTPS and FTPS)

--

Tony Arcieri