Reply to Message

RE: Researcher demonstrates SSL attack

mammasjoy@... 23rd Feb 2009

The latest in the seemingly neverending stream of techniques meant to expose ssl as flawed...really, though, once again this shows that it's not ssl itself that's flawed but the manner in which browsers transition from unencrypted to encrypted sites. That, indeed, needs to be improved, and would pretty much put all the MITM spoofs and scams out of business immediately. As The UK Register's article pointed out as well, there are more robust encryption technologies out there that are impervious to MITM, such as extended validation (simply because it's impossible to replicate). Eventually this phishing style will die out, it's just going to require some education and investment.