good article on the MD5 (commonly used for SSL) vulnerability

335e92tx · 01-05-2009, 03:50 PM

http://blogs.techrepublic.com.com/ne...76&tag=nl.e102
SSL: Really broken this time

In short, dont use MD5 and dont connect to websites that DO.

solefald · 01-05-2009, 04:22 PM

you just went waaaaaay over the heads of 99% people on this forum. lol

335e92tx · 01-05-2009, 04:31 PM

Sorry, its a little tough to simplify. Just hope (or use the screenshots to confirm) that the admin for your bank website has knowledge to be using certificate authorities that dont use MD5s.

solefald · 01-05-2009, 04:50 PM

Quote:

Originally Posted by 335e92tx

Sorry, its a little tough to simplify. Just hope (or use the screenshots to confirm) that the admin for your bank website has knowledge to be using certificate authorities that dont use MD5s.

it will be YEARS before banks will do anything about it, let alone rip-offs like Verisign and Thawte who use SSL as their primary source of profits.

darkphantom · 01-05-2009, 04:52 PM

md5 checksums?

335e92tx · 01-05-2009, 05:04 PM

Quote:

Originally Posted by darkphantom

md5 checksums?

Yes, but not the traditional use of MD5s for file integrity downloads.

01-05-2009, 03:50 PM	#1
335e92tx ahat 1040 Rep 2,592 Posts Drives: Was '07-335e92 - Now '13-335IS Join Date: Mar 2008 Location: Texas iTrader: (6)	good article on the MD5 (commonly used for SSL) vulnerability http://blogs.techrepublic.com.com/ne...76&tag=nl.e102 SSL: Really broken this time In short, dont use MD5 and dont connect to websites that DO. __________________ '13 335IS N54 (1 of 373 LeMans Blue out of 3597 total production e92)- Grey interior (1 of 24 in LMB with any trans- 1 of 14 with DCT)-MODS -MFactory LSD/MHD-BQ custom Tune/ATM-IC/AFE Momentum GT Intake/Konis/Mfront&HeimJoint Rear rods&arms/Brembos. https://photos.app.goo.gl/Lo6aHZRo7XqtPkhL8
	Appreciate 0 Tweet Quote

01-05-2009, 04:22 PM	#2
solefald Nigerian Prince 389 Rep 2,180 Posts Drives: '11 F25 Join Date: Apr 2008 Location: San Diego, CA iTrader: (2) Garage List '11 BMW F25 [0.00]	you just went waaaaaay over the heads of 99% people on this forum. lol __________________ http://soundcloud.com/djtchort
	Appreciate 0 Quote

01-05-2009, 04:31 PM	#3
335e92tx ahat 1040 Rep 2,592 Posts Drives: Was '07-335e92 - Now '13-335IS Join Date: Mar 2008 Location: Texas iTrader: (6)	Sorry, its a little tough to simplify. Just hope (or use the screenshots to confirm) that the admin for your bank website has knowledge to be using certificate authorities that dont use MD5s. __________________ '13 335IS N54 (1 of 373 LeMans Blue out of 3597 total production e92)- Grey interior (1 of 24 in LMB with any trans- 1 of 14 with DCT)-MODS -MFactory LSD/MHD-BQ custom Tune/ATM-IC/AFE Momentum GT Intake/Konis/Mfront&HeimJoint Rear rods&arms/Brembos. https://photos.app.goo.gl/Lo6aHZRo7XqtPkhL8
	Appreciate 0 Quote

01-05-2009, 04:52 PM	#5
darkphantom Banned 601 Rep 5,946 Posts Drives: E93 335i Join Date: Aug 2007 Location: The place for Bimmers iTrader: (4)	md5 checksums?
	Appreciate 0 Quote