about sniffing

[Nikolay Hristov]

Hi   I've found some utilities that claims that can sniff ssh1 and https traffic (man-in-the-middle attack) - http://ettercap.sourceforge.net Is it true?  And why are these certificates and SSL support for web servers? Can someone explain why it is possible or why it isn't? Or give some links to read about this problems.   Nikolay Hristov