Comment on A New, Simple Way to Salt your HashesparentComments−tptacek18yNo, the whole point of SSL is that it is not vulnerable to MITM attacks, because the client carries anchor keys.−stcredzero18yIf you're connecting to a website that looks the same, but the URL is slightly different, it won't help. What's more, the URL doesn't have to be different for the entire user's session.−tptacek18yIf you want to call that a "man in the middle attack", I won't argue, but as far as I'm concerned, that's a UI problem.
Comments
No, the whole point of SSL is that it is not vulnerable to MITM attacks, because the client carries anchor keys.
If you're connecting to a website that looks the same, but the URL is slightly different, it won't help. What's more, the URL doesn't have to be different for the entire user's session.
If you want to call that a "man in the middle attack", I won't argue, but as far as I'm concerned, that's a UI problem.