SSL Protocol Hole to Get Fixed

SSL Protocol Hole to Get Fixed

IT engineers have used IT Support and worked on a fix for a potentially serious IT security vulnerability in the SSL. This secure sockets layer is the protocol that takes care of the security of email, web transactions and sensitive internet traffic. The final version of the fix has been approved by the Internet Engineering Task Force and it will be published as a formal standard.

This fix means that hackers won't be able to insert malicious software into traffic that is passing between two endpoints. Since the critical vulnerability was discovered, software makers have disabled the feature of the SSL that renegotiates encrypted sessions. "Now that the standard is final, people will need to go back to polish up their implementations and make sure they conform exactly to the standard so they function well," said chief technology officer of PhoneFactors.