Information Security Stack Exchange is a question and answer site for information security professionals. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Possible Duplicate:
How might the U.K. Government's proposed internet surveillance equipment “bypass” encryption?

If I have a server (call it server 1) set up to receive POST data from another server (server 2) over SSL, and then server 1 does stuff with the POST data, what is there to stop a MITM intercepting the entire SSL payload and then sending it off to server 1 at a later time?

I realise that the MITM won't be able to see or modify the data, but couldn't they keep on sending it to server 1 and cause it to do something that we don't really want?

share|improve this question

marked as duplicate by Rory Alsop Jul 27 '12 at 10:58

This question was marked as an exact duplicate of an existing question.

Have you searched previous questions with MITM and SSL tags? – curiousguy Jul 27 '12 at 5:36
up vote 0 down vote accepted

SSL does not guarantee that MiTM will not occur. A proxy server can intercept SSL. There are corporate solutions to intercept SSL for logging purposes.

You are talking about a replay attack. Possibly, but redundant packets with the same data should be dropped. If you do not have the unencrypted body to manipulate a replay attack would be only as useful as just any DoS attack.

Some Links

Related Questions - -

share|improve this answer

Not the answer you're looking for? Browse other questions tagged or ask your own question.