> Cool, so you're being kind of disingenuous in your arguments by ignoring my underlying point (SSL does not do these things) I am not being condescending I am

> Cool, so you're being kind of disingenuous in your arguments by ignoring my underlying point (SSL does not do these things) I am not being condescending I am being completely serious here: maybe I just don't understand your underlying point. What are "these things that SSL does not do" that Javacript-over-SSL does do? > and my disclaimers (JS crypto has huge, real problems, I'm not an advocate for it), and instead just replying so you can invite moxie and tptacek to circlejerk on twitter apparently: https://twitter.com/marshray/status/340239501446217728 https://twitter.com/marshray/status/340239501446217728 Instead of make more comments for you to take out of context and condescendingly straw-man, I'm going to withdraw from this effort. Oh give me a flippin break. Anybody who clicks that link can see that it a reply to someone. Stand up for your point with rational arguments or admit your system is pwned by sslstrip.