Pros and Cons of SSL and HTTPS

[Black Mage]

I'm doing research on HTTPS/SSL. I was wondering if the Linux/Ubuntu community thinks there are any cons when utilizing SSL?

[hyper_ch]

are there cons?

[Dr Small]

Tronyx made a good post on his blog about the security (or rather, insecurity) of it:
http://ohsoninja.wordpress.com/2008/04/06/httpsuper-solution/

Dr Small

[hyper_ch]

I don't see that as a problem with SSL... social engineering works on everything... the main idea behind SSL is to encrypt the data transmitted...

To whom you transmit data is something else...

[HermanAB]

SSL is secure. There is a slight risk of a man-in-the-middle attack; SSH handles that with the 'known-hosts' file. Other than that, the only downsides are speed and the need for many IP addresses, which can be an issue if you are doing web hosting.