SSL and Malicious Hardware/Software

[Victor Duchovni]

On Mon, Apr 28, 2008 at 03:12:31PM -0700, Ryan Phillips wrote:

> What are people's opinions on corporations using this tactic?  I can't
> think of a great way of alerting the user, but I would expect a pretty
> reasonable level of privacy while using an SSL connection at work.  

Expectations of privacy at work vary by jurisdiction and industry. In
the US, and say in the financial services industry, any such expectations
are groundless (IANAL).

-- 

 /"\ ASCII RIBBON                  NOTICE: If received in error,
 \ / CAMPAIGN     Victor Duchovni  please destroy and notify
  X AGAINST       IT Security,     sender. Sender does not waive
 / \ HTML MAIL    Morgan Stanley   confidentiality or privilege,
                                   and use is prohibited.

---------------------------------------------------------------------
The Cryptography Mailing List
Unsubscribe by sending "unsubscribe cryptography" to majordomo at metzdowd.com