Pope Renegotiation I

Encyclical

"Pactum Renovatum". Marsh Ray found that TLS renegotiation let a man in the middle splice his own data onto the start of someone else's session, and since the flaw lay in the protocol itself, every implementation was hit at once. Fixing it meant changing the standard, with RFC 5746. The year opened the long season of attacks on TLS and taught that specifications need patches too.

Saint page: Saint TLS Renegotiation

Cardinals

SMBv2 srv2.sys negotiate overflow (MS09-050)