Defeating Ssl Using Sslstrip (Marlinspike Blackhat)

TheSecurityTube · talk · Watch on YouTube

What it is

Moxie Marlinspike's Black Hat talk presenting sslstrip, which defeats SSL in practice by intercepting the http-to-https redirect.

HN recommends it as an entertaining talk and the original source on the stripping attack that motivated HSTS.

“Very entertaining.”
Entertaining full talk on HTTPS attacks
ktta, 2017-09 · Strong recommendation · in “Broadening HSTS to secure more of the Web”
“Tricks for Defeating SSL in Practice - Moxie Marlinspike”
Recommended talk on defeating SSL in practice
fabulist, 2014-11 · Recommendation · in “How to Learn Hacking”
“Moxie has an entertaining talk”
Entertaining talk on certificate attacks
superuser2, 2015-09 · Recommendation · in “Our First Certificate Is Now Live”

Excerpts from Hacker News comments, linked to the originals. Summaries and labels were written by a language model from those comments.

Topics: sslstrip, moxie marlinspike, https, hsts, black hat