← Security+ glossary

Downgrade attack

An attack in which the attacker forces the communication onto an older, weaker version of a protocol or cipher which they can then break. The defense is disabling obsolete protocols and ciphers on the server, along with mechanisms such as TLS_FALLBACK_SCSV and HSTS.

All Security+ guides →