The DROWN Attack🔒 SSL Verified

Table of Contents

• ↓ Full technical paper
• ↓ Q&A
• ↓ Top Alternatives to drownattack.com

6-Month Traffic Trend Estimate

Official Contact & Profiles

Visual representation extracted from drownattack.com

Content Snippets from drownattack.com

"DROWN is a serious vulnerability that affects HTTPS and other services that rely on SSL and TLS, some of the essential cryptographic protocols for Internet security. These protocols allow everyone on the Internet to browse the web, use email, shop online, and send instant messages without third-parties being able to read the communication."

"DROWN allows attackers to break the encryption and read or steal sensitive communications, including passwords, credit card numbers, trade secrets, or financial data. At the time of public disclosure on March 2016, our measurements indicated 33% of all HTTPS servers were vulnerable to the attack. Fortunately, the vulnerability is much less prevalent now. As of 2019, SSL Labs estimates that 1.2% of HTTPS servers are vulnerable."

"Any communication between users and the server. This typically includes, but is not limited to, usernames and passwords, credit card numbers, emails, instant messages, and sensitive documents. Under some common scenarios, an attacker can also impersonate a secure website and intercept or change the content the user sees."

"Websites, mail servers, and other TLS-dependent services are at risk for the DROWN attack. At the time of public disclosure, many popular sites were affected. We used Internet-wide scanning to measure how many sites are vulnerable:"

Key Topics & Focus Areas for drownattack.com:

Full technical paper

Q&A