ALPACA gnaws through TLS protection to snarf cookies and steal data • The Register

Academics from three German universities have discovered a vulnerability within the Transport Layer Security (TLS) protocol that underneath restricted circumstances permits the theft of session cookies and allows cross-site scripting assaults. Dubbed ALPACA, which is brief for "Application Layer Protocol...