Can SSL be cracked?
SSL has existed as a protocol for Web site security for 15 years, and the underlying technology on which it is based is still as reliable and secure as when it was invented. If someone could develop a method for cracking SSL, it would be very valuable to thieves or foreign governments. For this reason, many people have tried to find a method for cracking SSL and they have all failed. The fact that no one has been able to defeat SSL is not proof of its invincibility, but it demonstrates why so many people and organizations trust it. It is not likely that anyone will develop a general method for defeating SSL, and if someone does, it would certainly be front page news. Update! In December 2008, an international team of security experts showed that under the right conditions, they could create a “rogue CA certificate” that would be trusted by all browsers, and that could be used to sign any other certificate. This situation would put the entire Internet security infrastructure at risk if