Re: SSL/TLS broken?

["Buhrmaster, Gary" <gtb () slac stanford edu>]

> -----Original Message-----
> From: funsec-bounces () linuxbox org [mailto:funsec-bounces () linuxbox org]
> On Behalf Of Valdis.Kletnieks () vt edu
> Sent: Monday, November 09, 2009 8:33 PM
> To: rMslade () shaw ca
> Cc: funsec () linuxbox org
> Subject: Re: [funsec] SSL/TLS broken?
>
> On Mon, 09 Nov 2009 15:50:40 PST, "Rob, grandpa of Ryan, Trevor, Devon
> & Hannah" said:
> > Ummmm, are we missing something?  As far as I can see, this affects
> *any* kind
> > of e-commerce, but I'm not seeing much discussion on it ...
>
> Yeah, it affects pretty much any SSL or TOS, so yes, basically all e-
> commerce.
>
> It's however mitigated by the requirement that you be able to MITM the
> connection.

So, you should be running a free anonymous proxy server?

_______________________________________________
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.