plc.myforum.ro

kosta · Member Joined: 09 Aug 2015 Posts: 161 Location: Salonic

Advertisers can track users across the Internet via TLS Session Resumption
By Catalin Cimpanu for Zero Day
An academic paper published last month has shed new light on a new user tracking technique that takes advantage of a legitimate mechanism associated with the TLS (Transport Layer Security) protocol -the backbone of modern HTTPS connections.
track users across the Internet via TLS Session Resumption track users across the Internet via TLS Session Resumption

track users across the Internet via TLS Session Resumption track users across the Internet via TLS Session Resumption

The abused TLS mechanism is called TLS Session Resumption (RFC 8447), a mechanism that was created in the mid-2000s to allow TLS servers to remember past user sessions and avoid wasting server resources by re-negotiating a TLS connection with a returning user.
https://www.zdnet.com/article/advertisers-can-track-users-across-the-internet-via-tls-session-resumption/