Phying News
Curated security research, vulnerabilities, advisories and tools for practitioners.

What Application Developers Need To Know About TLS Early Data (0RTT)

Summary

TLS 1.3's 0-RTT early data enables replay attacks on apps lacking anti-replay defenses—upgrading TLS alone can introduce vulnerabilities. It covers mitigations at CDN, proxy, and application layers.
Published
Collected

original ↗

Related coverage

back