The FREAK OpenSSL Flaw: What You Need to Know
In early January 2015, OpenSSL released a security update that gained little worldwide attention. Buried within the list of threats, with a severity rated “Low,” was this short blurb: “An OpenSSL client will accept the use of an RSA temporary key in a non-export RSA key exchange cipher suite. A server could present a weak…