The FREAK crypto downgrade attack
The FREAK crypto downgrade attack
Posted Mar 6, 2015 22:27 UTC (Fri) by job (guest, #670)In reply to: The FREAK crypto downgrade attack by jnareb
Parent article: The FREAK crypto downgrade attack
Look under the heading "Servers" on the mentioned page, and there is a link to https://tools.keycdn.com/freak , which can test if your web server is vulnerable.
The authors say that 37% of all servers are vulnerable, but that may depend on where in the world you are. I had to search very hard before I finally found a server in the wild that is vulnerable to this. The published top list of vulnerable sites consists mostly of Chinese and Indian sites (but then again, that may be true for most of the web today).
