Java’s SSLSocket How Bad APIs Compromise Security Georg Lukas published in Magdeburger Journal zur Sicherheitsforschung (2015, #9, p. 506-513) Info Internet security is hard. TLS is almost impossible. Implementing TLS correctly in Java is »Nightmare!«. This paper will show how a badly designed security API introduced …

Read More