Lessons Learned From Previous SSL/TLS Attacks

this is interesting because Chris Meyer (one of the authors of the paper) is going to soon release details about an attack similar to Bleichenbacher that effects the Java SSL implementation and possibly other implementations.

There are a surprising number of typos in this paper.