SSL is insecure because it does not authenticate clients and the connection can be hijacked.
dsniff 2.3, written by Dug Song, is making the rounds and causing a stir with the "SSL and SSH is the answer" consortium. Already extremely popular for all types of monetary transactions, we recomend you play with this today!
read more, download sploits: http://securityportal.com/cover/coverstory20001218.html
Of coarse the real answer is not that we need to build better crypto as much as it is that we need to build a better user. All design submission can be sent to us@collusion.org. Concept suggestions can be posted in the response section. Thank you in supporting a better future.
|