Familiar with SSL and TLS Encryption Technology

 

Internet network
- Data encryption is the key to internet security tuk. Each time you log-in to your email account or a website, chances are your browser is protected with encryption technology is called regular or with TLS (Transport Layer Security).

TLS was first started in 1999 as an up grade of SSL (Secure Socket Layer) encryption 3.0, TLS 1.0 is used as a part of which became the standard HTTPS encryption Web tuk encrypt data.

Almost all of today's web sites and browser information secured using TLS tuk which is transferred between Internet users who visited the site with.

Duong and Thai security researcher Juliano Rizzo admitted to cracking the data encryption TSL 1.0 just by using sniffer (to monitor data packets on the network) and a bit of JavaScript code.

These researchers tested directly using the BEAST (which is used browser exploits tuk SSL / TLS) Security Conference in Buenos Aires Ekoparty during mid September.

These data piracy begins with JavaScript code which infects internet browser when a user clicks on a link which is unclear or visit the web site which is dangerous.

When BEAST infect browsers, it will monitor the website to exchange data with encryption. These usually incorporate with the block of plain-text into the data.

After 5-10 minutes BEAST infect browsers, according to Rizzo told The Register, BEAST usually managed to cracking the code on the data encryption. Then the data is used ts to the data encryption secret is stored in a cookie which computer.


Developers can use the browser 1.1 or TLS 1.2 who are immune to such attacks toritis addition BEAST browser such as Chrome or Facebook Connect API can protect their data from the BEAST with avoiding malware with developing safe browsing, such as not opening the links which are not trusted.