2009-11-19 TLS / SSLv3 renegotiation vulnerability explained http://blog.g-sec.lu/2009/11/tls-sslv3-renegotiation-vulnerability.html pdfへのリンクあり.