ALPACA
lorecryptographysecurity
A 2021 cross-protocol attack that confuses TLS services sharing a certificate.
Application Layer Protocol Confusion Analyzing Cross-protocol Attacks redirected a TLS connection meant for one service to another that shared the certificate, exploiting mismatched application-layer expectations. Strict SNI and ALPN checking mitigate it.
Also known as: ALPACA, Application Layer Protocol Confusion Analyzing Cross-protocol Attacks
Sources
- ALPACA attack (2021)