Inventor: SSL security woes are really the fault of browser design

Egypt-born Taher Elgamal has been credited as the inventor of today's widely-used SSL protocol. In a recent interview at the RSA Conference, Elgamal explained how SSL man-in-the-middle attacks and the interception of session cookies are really related to browser design. The most revealing information from the interview came from Elgamal's response to the question: Would you have done things differently, with the knowledge of the security landscape as it is today? His reply was, "Actually I honestly do not think it would be different...we would change the design of the client--the browser. But the protocol itself is actually quite good." Article