A few days ago a patch to the highly-publicized OpenSSL vulnerability

 
http://www.pcworld.com/businesscenter/article/182304/ssl_flaw_could_have_been_used_to_hack_twitter.html

was released for OpenBSD-stable at

 ftp://ftp.openbsd.org/pub/OpenBSD/patches/4.6/common/004_openssl.patch

What exactly is the effect of this patch?  

I assume that it prevents renegotiation man-in-the-middle attacks
against webservers running OpenBSD, but does it also help OpenBSD
clients?  For example, suppose that I'm doing some online banking with
lynx, and somebody attempts a man-in-the-middle attack on my https
connection.  What will happen?

Reply via email to