Re: [TLS] Rizzo claims implementation attach, should be interesting

[Geoffrey Keating <[e-mail]>]

Martin Rex <[e-mail]> writes:

> SSL was NEVER designed with a promise that you could multiplex
> data from an evil attack with data from a victim over the very same
> SSL connection and be secure against adaptive chose plaintext
> attacks trying to recover data from the victim.

This would imply that you should not use SSL for downloading e-mail
using POP or IMAP, because that's multiplexing evil data (mail sent to
you by the attacker) with trusted data (credentials and non-evil
mail).