I'd also add: Remote timing attacks are practical[1, 2]. Twitter as target of it in the past[3]. [1] http://crypto.stanford.edu/~dabo/abstracts/ssl-timing.html

I'd also add: Remote timing attacks are practical[1, 2]. Twitter as target of it in the past[3]. [1] http://crypto.stanford.edu/~dabo/abstracts/ssl-timing.html http://crypto.stanford.edu/~dabo/abstracts/ssl-timing.html [2] http://codahale.com/a-lesson-in-timing-attacks/ http://codahale.com/a-lesson-in-timing-attacks/ [3] http://scforum.info/index.php?topic=4358.0 http://scforum.info/index.php?topic=4358.0