|
Although I agree this is a big big problem, let's all accept the fact that Man-In-The-Middle attacks are not easy on the internet. You would need access to one of the main routers on the net to make this matter big time. Of course a spyware system running on a client's system is now able to decrypt SSL then, but it could grab the data after decryption anyway...
I know very few people that have access to major routers on the net and would use them to hack SSL streams.
__________________
"Think about it a little more and you'll agree with me, because you're smart and I'm right."
- Charlie Munger
|