Skip to content

Glossary: Attacks and Indicators

SSL stripping

Keeping the victim on plain http:// while the attacker talks HTTPS to the real site. HSTS defeats it.

Where the book teaches it

Related terms

HSTS (HTTP Strict Transport Security)downgrade attack