Good thing you didn't poke harder at the stack abomination that DSL actually is.
Also, good post, keeps things at a roughly comprehensible level, I think.
As far as SSL design goes, there's been one rather GLARINGLY bad design choice (causing glaringly large security hole in all or at least almost all SSL implementations). I do not know to what extent this was used before, to wiretap SSL comms, but it is a protocol-supported man-in-the-middle attack.
![[personal profile]](https://www.dreamwidth.org/img/silk/identity/user.png){kind=small}
zvi
(no subject)
Date: 2009-12-17 11:31 (UTC)Also, good post, keeps things at a roughly comprehensible level, I think.
As far as SSL design goes, there's been one rather GLARINGLY bad design choice (causing glaringly large security hole in all or at least almost all SSL implementations). I do not know to what extent this was used before, to wiretap SSL comms, but it is a protocol-supported man-in-the-middle attack.