What type of attack is being performed when an attacker intercepts the initial communications between a Web server and a Web browser while forcing a vulnerable server to insecurely renegotiate the encryption being used down to a weaker cipher?
A) Cross Server attack
B) SSL/TLS downgrade attack
C) Hydra attack
D) TCP/IP attack

Question

Quizplus · Accepted Answer

This is an SSL/TLS downgrade attack, where the attacker intercepts initial communications and forces the encryption to be downgraded to a weaker cipher. This leaves the connection vulnerable to further attacks, such as man-in-the-middle attacks. The other options listed are not relevant to this specific attack scenario.

What Type of Attack Is Being Performed When an Attacker