lukechilds/node - node - Gitea: Git with a cup of tea

6030 Commits

131 Branches

446 Tags

325 MiB

Tree: 20143b359c

Commit Graph

Author	SHA1	Message	Date
isaacs	0cdf85e28d	Lint all the JavaScripts.	13 years ago
Ben Noordhuis	3415427dbf	tls: mitigate session renegotiation attacks The TLS protocol allows (and sometimes requires) clients to renegotiate the session. However, renegotiation requires a disproportional amount of server-side resources, particularly CPU time, which makes it a potential vector for denial-of-service attacks. To mitigate this issue, we keep track of and limit the number of renegotiation requests over time, emitting an error if the threshold is exceeded.	13 years ago

Author

SHA1

Message

Date

isaacs

0cdf85e28d

Lint all the JavaScripts.

13 years ago

Ben Noordhuis

3415427dbf

tls: mitigate session renegotiation attacks

The TLS protocol allows (and sometimes requires) clients to renegotiate the
session. However, renegotiation requires a disproportional amount of server-side
resources, particularly CPU time, which makes it a potential vector for
denial-of-service attacks.

To mitigate this issue, we keep track of and limit the number of renegotiation
requests over time, emitting an error if the threshold is exceeded.

13 years ago

2 Commits (20143b359c78577861309302fb56e11ddfd7f2db)