3 ms·
isn't this completely missing the point, i.e. banks being able to say 'no third parties can see our clients identifying information/balances/etc?' yes, the SSL
by blibble 12y ago
isn't this completely missing the point, i.e. banks being able to say 'no third parties can see our clients identifying information/balances/etc?'
yes, the SSL key doesn't leave the bank, but everything it is protecting is..
- spacefight 12y agoBanks will typically do what the regulations require and then, what the cost of doing it is. Sometimes, that order flips ;)
- indutny 12y agoIt only protects one thing - server identity. The best ciphers do you use DHE for negotiating the key, so the conversation between bank and the client is secure anyway.
- jtgeibel 12y agoUnder this scheme, the DHE is between the client and CloudFlare, not the client and the true end-point. CloudFlare still sees the full plaintext of the HTTPS session (as it must in order to do it's magic). The encryption is not end-to-end.
- keyme 12y agoIt's a matter of trust. You do trust Intel corp to not place an RF transmitter inside your CPU, right?