I didn't know about TLS 1.1/1.2 prior to reading that article.  My question: why isn't a newer version of the technology being used?  I guess I'm curious as to what the changes are in 1.1/1.2 compared to 1.0.  Were they just performance updates that people didn't think were worth using?  And since there wasn't any security issues, they didn't see a NEED to use the newer versions?

If this is true we are in a big s**t.

You can't convince the C*O of a bank (for example) that is better to upset a lot of customers than to put them at risk.

I wait to see what will happen Friday.

Thanks for those links, cd1zz.

For the curious (should be all of us, right? ), a video demonstrating BEAST at work: http://www.youtube.com/watch?v=BTqAIDVUvrU