▶

Moxie Marlinspike Demonstrates sslstrip's SSL Attack

TheSecurityTube · Talk · 1 h 9 min · 2012 · YouTube title: Defeating Ssl Using Sslstrip (Marlinspike Blackhat)
Why it's here

HN recommends it as an entertaining talk and the original source on the stripping attack that motivated HSTS.

What it covers

Moxie Marlinspike's Black Hat talk presenting sslstrip, which defeats SSL in practice by intercepting the http-to-https redirect.