Messages have appeared on the
Mozilla security blog and the Tor
project blog regarding the recently-disclosed attack against
TLS 1.0. The summary is: neither the Firefox browser nor the Tor
service is vulnerable. The Tor post has a lot of information about how the
attack works and why they are not worried about it. Mozilla, instead, says
that some Java plugins may be vulnerable and that Java should be disabled.
(Log in to post comments)