Fredrik Nordgren wrote: > Well, since that product requires the private SSL key, it's unlikely it > can provide any help with decrypting unauthorized SSL traffic.
This is obviously true for any pattern matching IDS product: the "ssl decryptors" are meant for the protection of your servers, not for the protection of clients. Stefano ------------------------------------------------------------------------ Test Your IDS Is your IDS deployed correctly? Find out quickly and easily by testing it with real-world attacks from CORE IMPACT. Go to http://www.coresecurity.com/index.php5?module=Form&action=impact&campaign=intro_sfw to learn more. ------------------------------------------------------------------------
