I came across this article http://iang.org/ssl/mallory_wolf.html which
is the third in google search's response to "ssl mitm". It says there
havent been any (major?) SSL MITM attacks so far (Article is dated Mar
2003), and so spending on buying a ssl server cert is just waste of
money. I am no way convinced with this guy's argument, but to think of
it - are there any real world SSL MITM attacks recorded in the recent
history that caused a severe damage to anyone?
thanks!
-------------------------------------------------------------------------
This List Sponsored by: Watchfire
Watchfire's AppScan is the industry's first and leading web application
security testing suite, and the only solution to provide comprehensive
remediation tasks at every level of the application. See for yourself.
Download AppScan 6.0 today.
https://www.watchfire.com/securearea/appscansix.aspx?id=701300000003Ssh
--------------------------------------------------------------------------
Received on Jan 30 2006
Intro
