Re:Dissecting the SSL handshake
by exDM69 on Monday June 18, 2012 @11:36AM
(#4126912)
> Reading this, it seems to imply that key exchange in TLS is an insecure process.
The key exchange in itself is an insecure process that may be attacked with a man in the middle attack. However, this is a known limitation of the key exchange protocol which is fixed by adding a public key signature to the key exchange messages so TLS is not vulnerable overall. </oversimplification>
The key exchange in itself is an insecure process that may be attacked with a man in the middle attack. However, this is a known limitation of the key exchange protocol which is fixed by adding a public key signature to the key exchange messages so TLS is not vulnerable overall. </oversimplification>