{"guid":"144b2208-bf0b-494c-99e5-665ed18f1e8f","title":"goto fail;","subtitle":"exploring two decades of transport layer insecurity","slug":"32c3-7438-goto_fail","link":"https://events.ccc.de/congress/2015/Fahrplan/events/7438.html","description":"Legend has it, the first iteration of the Secure Sockets Layer (SSL) protocol was broken in ten minutes by Phillip Hallam-Baker and Alan Schiffman during a presentation by Marc Andreesen at MIT in 1994. In the following two decades the protocol has been improved and the implementations have been strengthened, but not without a steady stream of implementation vulnerabilities and protocol design errors. From the ciphersuite rollback attack to LogJam, SSL/TLS has seen a diverse set of problems. In this talk we’ll discuss the pitfalls in designing and implementing a cryptographic protocol and lessons learned from TLS up to version 1.2.","original_language":"eng","persons":["Nick Sullivan"],"view_count":12115,"promoted":false,"date":"2015-12-28T23:00:00.000+01:00","release_date":"2015-12-29T01:00:00.000+01:00","updated_at":"2026-01-16T06:45:07.285+01:00","tags":["Failosophy"],"length":3809,"duration":3809,"thumb_url":"https://static.media.ccc.de/media/congress/2015/7438-hd.jpg","poster_url":"https://static.media.ccc.de/media/congress/2015/7438-hd_preview.jpg","timeline_url":"https://static.media.ccc.de/media/congress/2015/144b2208-bf0b-494c-99e5-665ed18f1e8f-timeline.jpg","thumbnails_url":"https://static.media.ccc.de/media/congress/2015/144b2208-bf0b-494c-99e5-665ed18f1e8f-thumbnails.vtt","frontend_link":"https://media.ccc.de/v/32c3-7438-goto_fail","url":"https://api.media.ccc.de/public/events/144b2208-bf0b-494c-99e5-665ed18f1e8f","conference_title":"32C3: gated communities","conference_url":"https://api.media.ccc.de/public/conferences/32c3","related":[{"event_id":1698,"event_guid":"import-8ea249dc923ddef614","weight":3},{"event_id":2811,"event_guid":"fa0727ab-81a7-4197-bc7d-0ce5e9dc4526","weight":3},{"event_id":2832,"event_guid":"489a414b-2d6b-4f20-8187-813169ca19c9","weight":9},{"event_id":2837,"event_guid":"9f2e9ff0-1555-470b-8743-9f07f54e9097","weight":4},{"event_id":2847,"event_guid":"6f79c506-a6cd-4430-bfbf-1841aca06e41","weight":3},{"event_id":2850,"event_guid":"4f1a0717-6931-4580-9e49-5d523be045df","weight":3},{"event_id":2862,"event_guid":"2f4cd1ef-dd90-4145-a734-141e5c081940","weight":3},{"event_id":2863,"event_guid":"9f89d94f-07fd-47f4-9ad0-c8dda94de175","weight":3},{"event_id":2875,"event_guid":"0bdbef2d-1594-4582-b315-7ee5da5505bf","weight":3},{"event_id":2879,"event_guid":"3f61827f-8b17-47b4-a43c-e0dce6532cbe","weight":4},{"event_id":2882,"event_guid":"df35c860-60fc-4df8-801c-b2f4f91b33b8","weight":5},{"event_id":2902,"event_guid":"930673b3-4f75-40eb-8be5-574469c3920f","weight":4},{"event_id":2904,"event_guid":"8b01d636-d39b-44b8-8d6f-fc03e47eae1b","weight":3},{"event_id":2911,"event_guid":"60ba43d2-a9c8-42ab-a434-8772cb182675","weight":3},{"event_id":2919,"event_guid":"4d473646-e765-441b-98eb-653dfe6bdeb1","weight":4},{"event_id":2937,"event_guid":"b89b8cff-c496-4885-8e72-1461e8b274f7","weight":3},{"event_id":2947,"event_guid":"422ba0b9-debb-436e-9822-e9a201dec845","weight":3},{"event_id":2951,"event_guid":"2e3d2878-e8b0-44cd-aea8-baf52be25ecf","weight":4},{"event_id":3636,"event_guid":"a1a52c4c-8233-403b-8f04-db981df016c1","weight":4},{"event_id":3692,"event_guid":"f21478d4-e8db-4f19-854c-2f74b5824706","weight":4}],"recordings":[{"size":47,"length":3800,"mime_type":"audio/opus","language":"deu","filename":"32c3-7438-de-goto_fail.opus","state":"downloaded","folder":"opus-translation","high_quality":true,"width":null,"height":null,"updated_at":"2015-12-30T13:36:38.712+01:00","recording_url":"https://cdn.media.ccc.de/congress/2015/opus-translation/32c3-7438-de-goto_fail.opus","url":"https://api.media.ccc.de/public/recordings/9245","event_url":"https://api.media.ccc.de/public/events/144b2208-bf0b-494c-99e5-665ed18f1e8f","conference_url":"https://api.media.ccc.de/public/conferences/32c3"},{"size":57,"length":3800,"mime_type":"audio/mpeg","language":"deu","filename":"32c3-7438-de-goto_fail.mp3","state":"downloaded","folder":"mp3-translated","high_quality":true,"width":null,"height":null,"updated_at":"2015-12-30T13:36:04.663+01:00","recording_url":"https://cdn.media.ccc.de/congress/2015/mp3-translated/32c3-7438-de-goto_fail.mp3","url":"https://api.media.ccc.de/public/recordings/9244","event_url":"https://api.media.ccc.de/public/events/144b2208-bf0b-494c-99e5-665ed18f1e8f","conference_url":"https://api.media.ccc.de/public/conferences/32c3"},{"size":null,"length":null,"mime_type":"application/x-subrip","language":"eng","filename":"DRAFT_32c3-7438-en-de-goto_fail.en_DRAFT.srt","state":"todo","folder":"","high_quality":true,"width":null,"height":null,"updated_at":"2022-01-15T17:52:44.184+01:00","recording_url":"https://cdn.media.ccc.de/congress/2015/DRAFT_32c3-7438-en-de-goto_fail.en_DRAFT.srt","url":"https://api.media.ccc.de/public/recordings/50693","event_url":"https://api.media.ccc.de/public/events/144b2208-bf0b-494c-99e5-665ed18f1e8f","conference_url":"https://api.media.ccc.de/public/conferences/32c3"},{"size":248,"length":3809,"mime_type":"video/mp4","language":"eng-deu","filename":"32c3-7438-en-de-goto_fail_sd.mp4","state":"downloaded","folder":"h264-sd","high_quality":false,"width":720,"height":576,"updated_at":"2016-02-03T14:12:58.616+01:00","recording_url":"https://cdn.media.ccc.de/congress/2015/h264-sd/32c3-7438-en-de-goto_fail_sd.mp4","url":"https://api.media.ccc.de/public/recordings/9246","event_url":"https://api.media.ccc.de/public/events/144b2208-bf0b-494c-99e5-665ed18f1e8f","conference_url":"https://api.media.ccc.de/public/conferences/32c3"},{"size":224,"length":3809,"mime_type":"video/webm","language":"eng-deu","filename":"32c3-7438-en-de-goto_fail_webm-sd.webm","state":"downloaded","folder":"webm-sd","high_quality":false,"width":720,"height":576,"updated_at":"2016-02-03T14:12:58.710+01:00","recording_url":"https://cdn.media.ccc.de/congress/2015/webm-sd/32c3-7438-en-de-goto_fail_webm-sd.webm","url":"https://api.media.ccc.de/public/recordings/9247","event_url":"https://api.media.ccc.de/public/events/144b2208-bf0b-494c-99e5-665ed18f1e8f","conference_url":"https://api.media.ccc.de/public/conferences/32c3"},{"size":48,"length":3800,"mime_type":"audio/opus","language":"eng","filename":"32c3-7438-en-goto_fail.opus","state":"downloaded","folder":"opus","high_quality":true,"width":null,"height":null,"updated_at":"2016-01-02T19:55:31.752+01:00","recording_url":"https://cdn.media.ccc.de/congress/2015/opus/32c3-7438-en-goto_fail.opus","url":"https://api.media.ccc.de/public/recordings/9474","event_url":"https://api.media.ccc.de/public/events/144b2208-bf0b-494c-99e5-665ed18f1e8f","conference_url":"https://api.media.ccc.de/public/conferences/32c3"},{"size":57,"length":3800,"mime_type":"audio/mpeg","language":"eng","filename":"32c3-7438-en-goto_fail.mp3","state":"downloaded","folder":"mp3","high_quality":true,"width":null,"height":null,"updated_at":"2015-12-30T00:04:58.448+01:00","recording_url":"https://cdn.media.ccc.de/congress/2015/mp3/32c3-7438-en-goto_fail.mp3","url":"https://api.media.ccc.de/public/recordings/9143","event_url":"https://api.media.ccc.de/public/events/144b2208-bf0b-494c-99e5-665ed18f1e8f","conference_url":"https://api.media.ccc.de/public/conferences/32c3"},{"size":601,"length":3809,"mime_type":"video/webm","language":"eng-deu","filename":"32c3-7438-en-de-goto_fail_webm-hd.webm","state":"downloaded","folder":"webm-hd","high_quality":true,"width":1920,"height":1080,"updated_at":"2016-02-03T21:01:46.809+01:00","recording_url":"https://cdn.media.ccc.de/congress/2015/webm-hd/32c3-7438-en-de-goto_fail_webm-hd.webm","url":"https://api.media.ccc.de/public/recordings/9243","event_url":"https://api.media.ccc.de/public/events/144b2208-bf0b-494c-99e5-665ed18f1e8f","conference_url":"https://api.media.ccc.de/public/conferences/32c3"},{"size":530,"length":3809,"mime_type":"video/mp4","language":"deu","filename":"32c3-7438-de-goto_fail.mp4","state":"downloaded","folder":"h264-hd-web","high_quality":true,"width":1920,"height":1080,"updated_at":"2016-02-03T14:12:12.427+01:00","recording_url":"https://cdn.media.ccc.de/congress/2015/h264-hd-web/32c3-7438-de-goto_fail.mp4","url":"https://api.media.ccc.de/public/recordings/8783","event_url":"https://api.media.ccc.de/public/events/144b2208-bf0b-494c-99e5-665ed18f1e8f","conference_url":"https://api.media.ccc.de/public/conferences/32c3"},{"size":569,"length":3809,"mime_type":"video/mp4","language":"eng-deu","filename":"32c3-7438-en-de-goto_fail_hd.mp4","state":"downloaded","folder":"h264-hd","high_quality":true,"width":1920,"height":1080,"updated_at":"2016-02-03T14:12:12.673+01:00","recording_url":"https://cdn.media.ccc.de/congress/2015/h264-hd/32c3-7438-en-de-goto_fail_hd.mp4","url":"https://api.media.ccc.de/public/recordings/8784","event_url":"https://api.media.ccc.de/public/events/144b2208-bf0b-494c-99e5-665ed18f1e8f","conference_url":"https://api.media.ccc.de/public/conferences/32c3"},{"size":529,"length":3809,"mime_type":"video/mp4","language":"eng","filename":"32c3-7438-en-goto_fail.mp4","state":"downloaded","folder":"h264-hd-web","high_quality":true,"width":1920,"height":1080,"updated_at":"2016-02-03T14:12:12.232+01:00","recording_url":"https://cdn.media.ccc.de/congress/2015/h264-hd-web/32c3-7438-en-goto_fail.mp4","url":"https://api.media.ccc.de/public/recordings/8782","event_url":"https://api.media.ccc.de/public/events/144b2208-bf0b-494c-99e5-665ed18f1e8f","conference_url":"https://api.media.ccc.de/public/conferences/32c3"}]}