> Surely anyone who can see the handshake can also decrypt what follows. No. That's the whole point of SSL/TLS. http://security.stackexchange.com/questions/62

> Surely anyone who can see the handshake can also decrypt what follows. No. That's the whole point of SSL/TLS. http://security.stackexchange.com/questions/6290/how-is-it-possible-that-people-observing-an-https-connection-being-established-w http://security.stackexchange.com/questions/6290/how-is-it-p...