Rather scary article...

[Kyle Rudnick]

This one's got me spooked. I'm never using WiFi for for https ever again.

http://news.zdnet.com/2100-9595_22-271389.html

[Kayla Smith]

On the contrary --sounds like a fun lab

[Jonathan Simms]

The article further reinforces the notion that SSL is insecure because most people do not verify SSL certificates. Security is useless when people find it annoying or cannot understand it and just blindly click their way through until they can get to what they want.

Here's an article by security expert Bruce Schneier on SSL forging:

http://www.schneier.com/blog/archives/2 ... l_cer.html

[Kyle Rudnick]

[quote="Kayla Smith"]On the contrary --sounds like a fun lab [/quote]

Yes -- yes it does.

Also, isn't Moxie Marlinspike the coolest name you've ever heard?

[danielberm]

Everyday it seems that we find ssl to be less and less capable as a secure method of communication.

Here's another article on the same exploit.

http://cwebnews.com/technology/new_ssl_ ... _hack.html