security - Can a man-in-the-middle intercept an SSL packet and duplicate it? -


afaik, ssl encrypt message under secure. still have concern whether or not man in middle can catch packet , duplicate e.g. 1000 times

application data broken small segments (implementation dependent size, <=16kb). segment is

  1. compressed
  2. given sequence number
  3. added mac (sequence number included in mac calculation)
  4. encrypted
  5. given ssl record header contains sequence number

note role of sequence number in process. if man-in-the-middle duplicates 1 such segment, received can detect using sequence number. , attacker cannot forge sequence number since included in mac record header.

sequence number gives ssl protection against duplication, deletion, reordering , replay attacks.


Comments

Popular posts from this blog

apache - Remove .php and add trailing slash in url using htaccess not loading css -

javascript - jQuery show full size image on click -