<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Word 14 (filtered medium)">
<!--[if !mso]><style>v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style><![endif]--><style><!--
/* Font Definitions */
@font-face
        {font-family:Helvetica;
        panose-1:2 11 6 4 2 2 2 2 2 4;}
@font-face
        {font-family:Helvetica;
        panose-1:2 11 6 4 2 2 2 2 2 4;}
@font-face
        {font-family:Calibri;
        panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
        {font-family:Tahoma;
        panose-1:2 11 6 4 3 5 4 4 2 4;}
@font-face
        {font-family:Georgia;
        panose-1:2 4 5 2 5 4 5 2 3 3;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
        {margin:0in;
        margin-bottom:.0001pt;
        font-size:12.0pt;
        font-family:"Times New Roman","serif";}
h1
        {mso-style-priority:9;
        mso-style-link:"Heading 1 Char";
        mso-margin-top-alt:auto;
        margin-right:0in;
        mso-margin-bottom-alt:auto;
        margin-left:0in;
        font-size:24.0pt;
        font-family:"Times New Roman","serif";}
h2
        {mso-style-priority:9;
        mso-style-link:"Heading 2 Char";
        mso-margin-top-alt:auto;
        margin-right:0in;
        mso-margin-bottom-alt:auto;
        margin-left:0in;
        font-size:18.0pt;
        font-family:"Times New Roman","serif";}
a:link, span.MsoHyperlink
        {mso-style-priority:99;
        color:blue;
        text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
        {mso-style-priority:99;
        color:purple;
        text-decoration:underline;}
span.Heading1Char
        {mso-style-name:"Heading 1 Char";
        mso-style-priority:9;
        mso-style-link:"Heading 1";
        font-family:"Cambria","serif";
        color:#365F91;
        font-weight:bold;}
span.Heading2Char
        {mso-style-name:"Heading 2 Char";
        mso-style-priority:9;
        mso-style-link:"Heading 2";
        font-family:"Cambria","serif";
        color:#4F81BD;
        font-weight:bold;}
span.EmailStyle19
        {mso-style-type:personal-reply;
        font-family:"Calibri","sans-serif";
        color:#1F497D;}
.MsoChpDefault
        {mso-style-type:export-only;
        font-size:10.0pt;}
@page WordSection1
        {size:8.5in 11.0in;
        margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
        {page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="blue" vlink="purple">
<div class="WordSection1">
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">An educated guess is that they would have already, if the issue required action on the part of Forum members.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"><o:p> </o:p></span></p>
<div style="border:none;border-left:solid blue 1.5pt;padding:0in 0in 0in 4.0pt">
<div>
<div style="border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif"">From:</span></b><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif""> public-bounces@cabforum.org [mailto:public-bounces@cabforum.org]
<b>On Behalf Of </b>Phillip<br>
<b>Sent:</b> Monday, September 10, 2012 11:04 AM<br>
<b>To:</b> Rob Stradling<br>
<b>Cc:</b> public@cabforum.org<br>
<b>Subject:</b> Re: [cabfpub] SSL BEASTie boys develop follow-up 'CRIME' web attack<o:p></o:p></span></p>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Apropos which:<o:p></o:p></p>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">Since this is a Google employee speaking as a Google employee, perhaps Google could share the technical details of the attack with the forum?<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<div style="margin-left:4.5pt;margin-right:1.5pt;outline: 0px;background-repeat:no-repeat;background-position-x:0%;background-position-y:50%;float:left">
<p class="MsoNormal" style="line-height:16.5pt;background:black;vertical-align:baseline">
<span style="font-size:9.0pt;font-family:"Helvetica","sans-serif";color:#CCCCCC"><br>
 <o:p></o:p></span></p>
</div>
<h1 style="margin:0in;margin-bottom:.0001pt;line-height:15.75pt;vertical-align:baseline;outline: 0px;background-position:initial initial;background-repeat:initial initial">
<span style="font-size:12.0pt;font-family:"Helvetica","sans-serif";color:#CCCCCC;text-transform:uppercase;letter-spacing:-.5pt">THAI DUONG <img id="_x0000_i1025" src="http://www.ekoparty.org/images/flag-vietnam.png"></span><span style="font-size:8.5pt;font-family:"Helvetica","sans-serif";color:#666666;text-transform:uppercase;border:none windowtext 1.0pt;padding:0in;font-weight:normal">(GOOGLE)</span><span style="font-size:12.0pt;font-family:"Helvetica","sans-serif";color:#CCCCCC;text-transform:uppercase;letter-spacing:-.5pt"><o:p></o:p></span></h1>
<div style="border:none windowtext 1.0pt;border-bottom:solid black 1.0pt;padding:4.0pt 8.0pt 8.0pt 15.0pt;outline: 0px;orphans: 2;widows: 2;-webkit-text-size-adjust: auto;-webkit-text-stroke-width: 0px;background-position:initial initial;background-repeat:initial initial;overflow:hidden;word-spacing:0px">
<div style="border:none;border-bottom:solid black 1.5pt;padding:0in 0in 15.0pt 0in;margin-top:3.75pt;margin-bottom:15.0pt;outline-width: 0px;outline-style: initial;outline-color: initial;z-index:auto">
<h2 style="mso-margin-top-alt:0in;margin-right:0in;margin-bottom:7.5pt;margin-left:0in;line-height:15.75pt;background:#242424;vertical-align:baseline">
<i><span style="font-size:13.5pt;font-family:"Georgia","serif";color:#D2D2D2;letter-spacing:-.35pt;font-weight:normal">The CRIME attack<o:p></o:p></span></i></h2>
<p class="MsoNormal" style="line-height:18.0pt;vertical-align:baseline"><span style="font-size:10.0pt;font-family:"Helvetica","sans-serif";color:#777777">We present a new set of attacks against old and new secure Internet protocols. Some of the most popular
 websites, browsers, and protocols are vulnerable. By vulnerable we meant the duo sitting next to you in coffee shops can get access to your emails, bank accounts, social networks, etc. We've worked with relevant parties to fix what can be fixed. We have a
 good news and a bad news for you. The good news is we've got working patches for most of the issues. The bad news is some of them might contribute to global warming. Let's upgrade and go plant some trees!<o:p></o:p></span></p>
</div>
<div style="border:none;border-bottom:solid black 1.5pt;padding:0in 0in 15.0pt 0in;margin-top:3.75pt;margin-bottom:15.0pt;outline-width: 0px;outline-style: initial;outline-color: initial;z-index:auto">
<p class="MsoNormal" style="line-height:18.0pt;vertical-align:baseline"><span style="font-size:10.0pt;font-family:"Helvetica","sans-serif";color:#777777"><o:p> </o:p></span></p>
</div>
</div>
<div>
<div>
<p class="MsoNormal">On Sep 10, 2012, at 12:50 PM, Phillip wrote:<o:p></o:p></p>
</div>
<p class="MsoNormal"><br>
<br>
<o:p></o:p></p>
<div>
<p class="MsoNormal">The conference is on the 19-21 September<br>
<br>
I guess we are going to want to discuss this at the NYC meeting.<br>
<br>
On Sep 10, 2012, at 3:01 AM, Rob Stradling wrote:<br>
<br>
<br>
<o:p></o:p></p>
<p class="MsoNormal">Another attack on SSL/TLS to be announced soon...<o:p></o:p></p>
<blockquote style="margin-top:5.0pt;margin-bottom:5.0pt">
<p class="MsoNormal"><o:p> </o:p></p>
</blockquote>
<blockquote style="margin-top:5.0pt;margin-bottom:5.0pt">
<p class="MsoNormal"><a href="http://www.theregister.co.uk/2012/09/07/https_sesh_hijack_attack/">http://www.theregister.co.uk/2012/09/07/https_sesh_hijack_attack/</a><o:p></o:p></p>
</blockquote>
<blockquote style="margin-top:5.0pt;margin-bottom:5.0pt">
<p class="MsoNormal"><o:p> </o:p></p>
</blockquote>
<blockquote style="margin-top:5.0pt;margin-bottom:5.0pt">
<p class="MsoNormal">-- <o:p></o:p></p>
</blockquote>
<blockquote style="margin-top:5.0pt;margin-bottom:5.0pt">
<p class="MsoNormal">Rob Stradling<o:p></o:p></p>
</blockquote>
<blockquote style="margin-top:5.0pt;margin-bottom:5.0pt">
<p class="MsoNormal">Senior Research & Development Scientist<o:p></o:p></p>
</blockquote>
<blockquote style="margin-top:5.0pt;margin-bottom:5.0pt">
<p class="MsoNormal">COMODO - Creating Trust Online<o:p></o:p></p>
</blockquote>
<blockquote style="margin-top:5.0pt;margin-bottom:5.0pt">
<p class="MsoNormal"><o:p> </o:p></p>
</blockquote>
<blockquote style="margin-top:5.0pt;margin-bottom:5.0pt">
<p class="MsoNormal">_______________________________________________<o:p></o:p></p>
</blockquote>
<blockquote style="margin-top:5.0pt;margin-bottom:5.0pt">
<p class="MsoNormal">Public mailing list<o:p></o:p></p>
</blockquote>
<blockquote style="margin-top:5.0pt;margin-bottom:5.0pt">
<p class="MsoNormal"><a href="mailto:Public@cabforum.org">Public@cabforum.org</a><o:p></o:p></p>
</blockquote>
<blockquote style="margin-top:5.0pt;margin-bottom:5.0pt">
<p class="MsoNormal"><a href="https://cabforum.org/mailman/listinfo/public">https://cabforum.org/mailman/listinfo/public</a><o:p></o:p></p>
</blockquote>
<p class="MsoNormal"><br>
_______________________________________________<br>
Public mailing list<br>
<a href="mailto:Public@cabforum.org">Public@cabforum.org</a><br>
<a href="https://cabforum.org/mailman/listinfo/public">https://cabforum.org/mailman/listinfo/public</a><o:p></o:p></p>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
</div>
</div>
</body>
</html>