How secure are Usenet SSL connections??

I use wifi for downloading usenet binaries via an SSL connection. I've
recently became aware of the SSL 'weaknesses' (SSLstrip, MITM
attacks, etc.) and have a few concerns regarding the privacy of my
connection and account credentials.

Are SSL usenet connections safer than HTTP SSL connections or do the
same security concerns apply?

Thanks for any nfo you can give.

On Sep 25, 12:36*pm, The Wobbly One <wobbly...@stumbler.com> wrote:
> I use wifi for downloading usenet binaries via an SSL connection. I've
> recently became aware of the SSL 'weaknesses' (SSLstrip, *MITM
> attacks, etc.) and have a few concerns regarding the privacy of my
> connection and account credentials.
>
> Are SSL usenet connections safer than HTTP SSL connections or do the
> same security concerns apply?
>
> Thanks for any nfo you can give.

Automation in SSL can hide your vulnerability. It is safer to use
encrypted files that are prepared offline and then exchange encrypted
files one at a time with a competent person.

On Sep 26, 12:36*am, The Wobbly One <wobbly...@stumbler.com> wrote:
> I use wifi for downloading usenet binaries via an SSL connection. I've
> recently became aware of the SSL 'weaknesses' (SSLstrip, *MITM
> attacks, etc.) and have a few concerns regarding the privacy of my
> connection and account credentials.
>
> Are SSL usenet connections safer than HTTP SSL connections or do the
> same security concerns apply?
>
> Thanks for any nfo you can give.

I would say it depends on whether or not you use public networks, and
whether or not you use Virtual Private Network (VPN) to hide yourself
when using these public networks.

For a wired connection, I think Man-In-The-Middle attacks are rare,
unless your data travels to many server points in between your source
and destination, and these servers have unscrupulous employees reading
your data (since https only secures the transmission of the data, and
it is decrypted at each point in-between). Outside of Russia and such
places, I would think or hope this is relatively rare.

For wireless public connections, I use HMA (Hide My ***) a VPN to get
around SSLstrip MITM attacks.

RL