Possible Duplicate:
How might the U.K. Government's proposed internet surveillance equipment “bypass” encryption?

If I have a server (call it server 1) set up to receive POST data from another server (server 2) over SSL, and then server 1 does stuff with the POST data, what is there to stop a MITM intercepting the entire SSL payload and then sending it off to server 1 at a later time?

I realise that the MITM won't be able to see or modify the data, but couldn't they keep on sending it to server 1 and cause it to do something that we don't really want?

marked as duplicate by Rory Alsop Jul 27 '12 at 10:58

This question has been asked before and already has an answer. If those answers do not fully address your question, please ask a new question.


SSL does not guarantee that MiTM will not occur. A proxy server can intercept SSL. There are corporate solutions to intercept SSL for logging purposes.

You are talking about a replay attack. Possibly, but redundant packets with the same data should be dropped. If you do not have the unencrypted body to manipulate a replay attack would be only as useful as just any DoS attack.

Some Links

Related Questions - https://stackoverflow.com/questions/2769992/replay-attacks-for-https-requests -http://serverfault.com/questions/32473/does-https-include-protection-from-a-replay-attack

Not the answer you're looking for? Browse other questions tagged or ask your own question.