bankinfosecurity

OpenSSL Flaw Enables HTTPS Decryption

All users of the OpenSSL crypto library should upgrade immediately to eliminate a serious flaw that attackers could exploit to decrypt Web traffic, security experts warn. See Also: Proof of Concept: ...
Network World

Let’s encrypt – but let’s also decrypt and inspect SSL traffic for threats

This vendor-written tech primer has been edited by Network World to eliminate product promotion, but readers should note it will likely favor the submitter’s approach. Ever since Edward Snowden’s ...
Network World

SSL decryption may be needed for security reasons, but employees are likely to ‘freak out’

LAS VEGAS — There are plenty of reasons that a company might want to try and decrypt SSL sessions — to stop outbound malware botnet connections that are decrypted, or to stop a rogue insider from ...
Ars Technica

High-severity bug in OpenSSL allows attackers to decrypt HTTPS traffic

Maintainers of the OpenSSL cryptographic code library have fixed a high-severity vulnerability that made it possible for attackers to obtain the key that decrypts communications secured in HTTPS and ...