I am not familiar enough with the protocol to answer this question:
is it possible for an evil SSL server to send packets such that it
ends up with an arbitrary signature from a client?  I'm trying to
emphasize the importange of keyUsage bits. :)

Thanks.

Reply via email to