SSL man-in-the-middle attacks and trust

Posted Dec 29, 2008 21:28 UTC (Mon) by clugstj (subscriber, #4020)
Parent article: SSL man-in-the-middle attacks

"but it does suffer from a major shortcoming: key exchange"

I can't think of a system that wouldn't suffer from this "shortcoming". Any system like this requires that someone/thing be "trusted".