Many people have wrong assumption that, if the site is HTTPS, it is very secure.
HTTPS protect the data during transit over the network (Internet), but do not protect before it is sent or after it arrives at the destination.
Using this weakness, hackers can exploit the server behavior by using HPP attack, SQL injection, cross site scripting...
Screen shot source: SSL and TLS Essentials: Securing the Web - by Stephen A. Thomas (WILEY)
---
Posts
No comments:
Post a Comment