Zimbra is aware of a newly disclosed SSL/TLS vulnerability that provides a potential malicious actor with a method to perform a Man-in-the-Middle (MitM) attack — the vulnerability is referred to as Logjam. Similar to FREAK, this attack targets export-grade encryption, specifically Diffie-Hellman key exchanges. For more information on the attack and how this applies to […]
Tag Archives | cryptography
When is a Lock, Not a Lock?
January was an interesting month for cryptography. The UK Prime Minister made some very strong statements about digital communication, essentially calling for strong encryption to be shirked by providing law enforcement with a back door. The US National Institute of Standards and Technology (NIST) announced the deprecation of several Federal Information Processing Standards (FIPS), one […]