Forum Discussion
Lupo_38935
Nimbostratus
Nimbostratusmitigating the TLS client-initiated renegotiation MITM attack
I thought I'd share the iRule we use to mitigate one of the recently disclosed TLS attacks. Our focus lies on preventing the possible malicious data insertion during 'client-initiated renegotiation'. ...
Paul_Zajicek_73Nimbostratus
NimbostratusHi,
There are some sites I've found that pass the test (www.asos.com), but my PCI DSS scanning supplier says I accept the http request, therefore I am vulnerable.
Looks like I have to upgrade (currently 9.3.0).
