Good thing you didn't poke harder at the stack abomination that DSL actually is.

Also, good post, keeps things at a roughly comprehensible level, I think.

As far as SSL design goes, there's been one rather GLARINGLY bad design choice (causing glaringly large security hole in all or at least almost all SSL implementations). I do not know to what extent this was used before, to wiretap SSL comms, but it is a protocol-supported man-in-the-middle attack.