3 ms·
This is one of the problems with how TLS/SSL (as implemented in web browsers) conflates the seperate issues of authentication/trust and encryption.
by mmagin 16y ago
This is one of the problems with how TLS/SSL (as implemented in web browsers) conflates the seperate issues of authentication/trust and encryption.
- briansmith 16y agoHow would you implement encryption without authentication? What would stop an attacker from sending confidential information to them, if you allow them to intercept the traffic and supply their own encryption keys? You may be interested in the TLS DH_anon cipher suites and the numerous debates surrounding them.