Downgrade Attack
- •
def
- •
forcing a system to abandon a secure, encrypted mode of operation and fall back to an older, less secure (or unencrypted) one
- •
- •
example
- •
POODLE (Padding Oracle On Downgraded Legacy Encryption) — an attack that forced a connection to downgrade to the older, weaker SSL 3.0 protocol, where its vulnerabilities could then be exploited
- •
- •
related
- •