Zakir Durumeric

An Empirical Analysis of HTTPS Configuration Security

2021 · arXiv (Cornell University)

It is notoriously difficult to securely configure HTTPS, and poor server configurations have contributed to several attacks including the FREAK, Logjam, and POODLE attacks. In this work, we empirically evaluate the TLS security posture of …