[thelist] quick ssl question

Thanks for the link, Anthony.

It appears that *yes* it is encrypted. Adrian, I presume the web server
decrypts for logging (since it has to to process it anyway).

Pertinent info:

5.7 Application data protocol

   Application data messages are carried by the Record Layer and are
   fragmented, compressed and encrypted based on the current
   connection state.  The messages are treated as transparent data to
   the record layer.


B. Glossary
     application protocol An application protocol is a protocol that
                          normally layers directly on top of the
                          transport layer (e.g., TCP/IP).  Examples
                          include HTTP, TELNET, FTP, and SMTP.

Thanks (as always)
sgd
--
work: http://www.ti3.com/
non: http://thinksafely.org/

> -----Original Message-----
> http://sitesearch.netscape.com/eng/ssl3/draft302.txt
>