[Cialug] Wired and Wireless security differences

[Jeffrey Ollie]

On 12/17/07, Nathan C. Smith <nathan.smith at ipmvs.com> wrote:
>
> Today somebody challenged my (perhaps falsely held) belief that an SSL
> transaction over wireless was equivalent to SSL over wired.  Is there an
> appreciable difference between the two?

The only difference is that it's easier to sniff wireless traffic,
therefore someone could see that you are sending encrypted traffic to
an IP address belonging to Amazon.com.  If they capture enough of your
traffic, they could probably correlate the unencrypted traffic to
Amazon.com with the encrypted traffic to make a guess at what you've
bought.  And even SSL traffic can be decrypted if you wait long enough
or through enough computing power at it.

Jeff