While most people use the term "SSL" to refer to "secure internet" most https connections today use TLS.
TLS uses pseudo random element in the handshake which prevents the MITM scenario you described.
Sadly Google Chrome doesn't support TLS (no friggin idea why) so server will negotitate down to the less secure SSL v2 or SSL v1 standard.
IE 8 or later, Firefox 2.0 or later. and Safari (no idea what version) all support TLS but obviously google thinks security is over-rated.
Wednesday, October 13, 2010
Slashdot | Why You See 'Free Public WiFi' In So Many Places-It's a bug in XP. We'll still be seeing it for years
Subscribe to:
Post Comments (Atom)
No comments:
Post a Comment