SSL will NOT protect a site from hackers. It will protect the data from being "sniffed" as it traverses the Net, and that is pretty much all it does. The data itself is unencrypted when it is being entered, therefore subject to keyloggers, and in most cases it is stored unencrypted on the destination servers where most hacks take place. IOW SSL is only significant for the few microseconds that the data is in transit.
IMO it gives a false sense of security because so few people understand its limitations.
Cheers
Rod (Adv dip in Network Security)


Reply With Quote
