[CS-FSLUG] OT: "How the NSA, and your boss, can intercept and break SSL"

[Fred A. Miller]

On 06/12/2013 05:21 AM, Don Parris wrote:
> One of the sessions I just sat in at the SouthEast Linux Fest this
> past weekend involved a guy hijacking our wi-fi connections.  And then
> he mentioned the ability to use ssl-strip to intercept SSL
> connections.  And he wasn't even talking about the government - just
> connecting to facebook from Starbucks can attract unwanted company.
>
>
> On Tue, Jun 11, 2013 at 8:36 PM, Fred A. Miller <fmiller at lightlink.com
> <mailto:fmiller at lightlink.com>> wrote:
>
>     "Summary: Most people believe that SSL is the gold-standard of
>     Internet security. It is good, but SSL communications can be
>     intercepted and broken. Here's how."
>
>     http://www.zdnet.com/how-the-nsa-and-your-boss-can-intercept-and-break-ssl-7000016573/
>
>     a VERY interesting read.....
>

'Sure can! There's way too much bad code out there, along with some
MAJOR changes that should have been made before now at the "gut" level
in the Net.

Fred

-- 
"Molon labe." MILLIONS of us will be waiting! 
--USA Patriots, 2013

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://ofb.biz/pipermail/christiansource_ofb.biz/attachments/20130612/ba32c569/attachment.htm>