I explained some of these security issues in a recent talk on False Start and Snap Start (which was withdrawn from IETF for other reasons). http://rdist.root.o

I explained some of these security issues in a recent talk on False Start and Snap Start (which was withdrawn from IETF for other reasons). http://rdist.root.org/2012/02/27/ssl-optimization-and-security-talk/ http://rdist.root.org/2012/02/27/ssl-optimization-and-securi... What's interesting to me about Adam's post is how fragile protocol implementations are in appliance-type devices. Of course, having seen the internals of other similar devices, I'm not surprised, but the parallels to consumer electronics are surprising, given the critical nature of these network appliances.