Alpaca-Attacke | Techzone
Summary
Alpaca (application layer protocols allowing cross-protocol attacks) [1] is a TLS protocol confusion attack. Under certain conditions, a man-in-the-middle attacker can successfully mix up HTTPS with other protocols such as FTPS, IMAPS, POP3S and extract sensitive information, e.g. cookies. All network services using TLS should strictly validate SNI and ALPN fields in a TLS handshake to prevent Alpaca. Airlock Gateway validates the SNI field by default (checkbox "Strictly match FQDN and aliases" on virtual hosts) during a TLS handshake and can therefore not be tricked to accept TLS connections intended to a different TLS service on a different domain. Note that any vulnerable TLS service (other than HTTPS on Airlock) can negatively affect the security of Airlock clients because a man-in-the-middle attacker could potentially execute JavaScript code in the victims browser by redirecting the HTTPS connection to a vulnerable TLS service (see resolution).
Classifications
AskAI Classifications
LabelsLinked Companies
