3 ms·
SSL solves a different problem. Problem 1: protection from session hijack across a series of requests. Solution: tickets. Problem 2: protection from intercept
by JulianMorrison 18y ago
SSL solves a different problem.
Problem 1: protection from session hijack across a series of requests. Solution: tickets.
Problem 2: protection from interception and alteration of the commands within one request. Solution: SSL.
SSL (even in its most powerful form as a password-protected client-side CA-signed cert!) provides no protection against problem 1.