| reply to Underplay
Re: Lets take our privacy back with encryption said by Underplay:Alright it seems like these guys wont leave our personal rights alone, this is the invasion of privacy and we need to start developing more encrypted protocols to keep these nosy people out of our business. Start encrypting EVERY BIT. I wish. But, for whatever reason we created SSL to be 'vulnerable'. Even though I don't see it as such, every browser maker makes self signed certs as a virus.
Until we can embrace self-signed SSL or make 'ESSL' (enhanced SSL), our data wont be encrypted. There are papers written on how insecure self-signed SSL certs are, but what is SSL's real purpose? To provide an encryption between 2 parties.
SSL is 'broken', any bad guy can buy a certificate pretending to be from a certain domain. So, even CA signed certs are vulnerable from MITM attacks. |
