Am I missing something? in http://www.dslreports.com/forum/r21008848 en Mon, 30 Nov 2009 10:36:40 EDT Mon, 30 Nov 2009 10:36:40 EDT Re: Am I missing something? http://www.dslreports.com/forum/remark,21012225 Viper007Bond : Actually, it would protect you on the first connect assuming someone else has connected to the site before. The trusted servers keep a history of known certs over time.]]> http://www.dslreports.com/forum/remark,21012225 Tue, 26 Aug 2008 22:18:44 EDT Re: Am I missing something? http://www.dslreports.com/forum/remark,21008932 knightmb :
said by cdru See Profile :

So how does having this "notary" prevent a man in the middle attack? If there is a man in the middle between me and my bank, for instance, why can't that same man be between this notary and my bank?
It's based on the system of "how have things been" and "how have thing changed".

If your bank has always used the same certificate that doesn't expire for 8 years and one day at a coffee shop, the certificate has completely changed, but still "valid" as a MITM attack would do, it throws up an alert. I won't protect you from a MITM attack on the first ever visit to your banking website, only those afterward.

It's part of the problem computers have that humans tend to be better at. That's complete trust of strangers. If things look fishy, we get suspicious. Computers, they don't care, if 2 > 1, then they are happy. For us, when we see 2 > 1.5 we ask why 1.5 instead 1 like before?
--
Fight NebuAD and the like:
Click Here to pollute their data]]> http://www.dslreports.com/forum/remark,21008932 Tue, 26 Aug 2008 11:40:50 EDT Re: Am I missing something? http://www.dslreports.com/forum/remark,21008916 TKJunkMail :
said by cdru See Profile :

So how does having this "notary" prevent a man in the middle attack? If there is a man in the middle between me and my bank, for instance, why can't that same man be between this notary and my bank?
See pages 7 thru 9 of their paper where they discuss the statistical odds against pulling off a MITM attack against the client and also against the MULTIPLE notaries at the same time.
»www.cs.cmu.edu/~perspectives/per···ix08.pdf
--
My BLOG .. .. Internet News .. .. My Web Page
Ask yourself one question: 'Do I feel lucky?' Well, do ya punk?]]> http://www.dslreports.com/forum/remark,21008916 Tue, 26 Aug 2008 11:38:52 EDT Am I missing something? http://www.dslreports.com/forum/remark,21008848 cdru : So how does having this "notary" prevent a man in the middle attack? If there is a man in the middle between me and my bank, for instance, why can't that same man be between this notary and my bank?]]> http://www.dslreports.com/forum/remark,21008848 Tue, 26 Aug 2008 11:23:07 EDT