Protecting Lightstreamer Against POODLE (SSLv3)
Google’s researchers recently discovered a new vulnerability affecting the SSL protocol. POODLE, which stands for Padding Oracle On Downgraded Legacy Encryption, allows an attacker (a man-in-the-middle) to decrypt ciphertext using a padding oracle side-channel attack. Full details are available in this Google paper. POODLE affects older standards of encryption, specifically Secure Socket Layer (SSL) version 3.0. It does…