for group CC09
What are dangerous URLs ?
for group CC10
What are the ways in which filezilla can check attacks from the errors handled on SSL/TLS secured data transfers.
What are dangerous URLs ?
for group CC10
What are the ways in which filezilla can check attacks from the errors handled on SSL/TLS secured data transfers.
1 comments:
An attacker could send spoofed FIN packets to the client. Even though GnuTLS (The GNU Transport Layer Security Library) detects this with GNUTLS_E_UNEXPECTED_PACKET_LENGTH, FileZilla did not record a transfer failure in all cases.
Unfortunately not all servers perform an orderly SSL/TLS shutdown. Since this cannot be distinguished from an attack, FileZilla will not be able to download listings or files from such servers.
Post a Comment