TLS verions and Poodle Attack
POODLE stands for “Padding Oracle On Downgraded Legacy Encryption”
Steps involved in attack:- Downgrade TLS connection to SSLv3: This can be done by repeatedly dropping the session and eventually client will try with lower SSL version.
- If cipher suite users RC4 or BLock Cipher, attacker can get encryted text and convert them to plain text later
TLS V1.3 usere only one round trip, instead of two as in TLS v1.2.
TLS V2 supports some old cryptographic algorithms, which is dropped in TLS V3
references: https://www.cloudflare.com/learning/ssl/why-use-tls-1.3/
