SSL Stripping
- •
def
- •
a downgrade attack that forces a browser to communicate over unencrypted HTTP instead of HTTPS, letting an on-path attacker read the traffic in the clear
- •
- •
mitigation
- •
HSTS (HTTP Strict Transport Security) — tells the browser to only ever connect over HTTPS
- •
- •
related