Novel Terrapin attack uses prefix truncation to downgrade the security of SSH channels.
  • netburnr@lemmy.worldEnglish
    31·
    1 year ago

    [For Terrapin to be viable, the connection it interferes with also must be secured by either “ChaCha20-Poly1305” or “CBC with Encrypt-then-MAC,” both of which are cipher modes added to the SSH protocol (in 2013 and 2012, respectively

    Well thats easy then, just change your allowed ciphers.

  • R0cket_M00se@lemmy.worldEnglish
    5·
    1 year ago

    MitM attacks are also one of the major threats to MFA.

    They don’t seem to talk much about TLS which is the current standard for most things (VoIP, email.) We still use ssh for a lot but HTTPS is secured through TLS 1.3