New security risk in SSL implementations
Posted on July 30, 2009, under Security.
More holes found in Web’s SSL security protocol.
It appears most modern browsers are susceptible to a simple man-in-the-middle attack on SSL certificates, meaning your encrypted browsing sessions can be intercepted.
The article lists Firefox 3.5 as the only modern browser not affected by the attack.