Forums Community SSL vulnerabilities – WikiLeaks Reply To: SSL vulnerabilities – WikiLeaks

#5745 Reply


Hello Pedro,

It’s always hard to separate conspiracy theory from real vulnerabilities in these scenarios. Our current view is that SSL/TLS is a good choice for AxCrypt. Better the devil you know, than the one you don’t, is part of it. We’re aware of various issues with SSL/TLS but we believe they are not generally relevant to our situation.

We currently have no plan to use SRP or any other mechanism, for establishing a secure connection between client and server.

Of course, this may change, but that’s the current viewpoint.