thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Security Operations · Intermediate

Downgrade Attack

Forcing a system to use an older, weaker protocol or cipher version that the attacker can exploit.

Definition

Attackers interfere with negotiation so connections fall back to insecure options, as in POODLE (SSL 3.0) or FREAK and Logjam (export-grade cryptography). Disabling legacy protocols and ciphers and using TLS 1.2/1.3 with downgrade protection prevents it.

Example

Stripping HTTPS to HTTP (SSL stripping) on a public Wi-Fi network.

Exam tip

Disabling legacy protocol versions is the mitigation; HSTS stops SSL stripping.

Related terms