About this question
I was wondering how this one works in practice and if it's as much of a risk as has been made out? It says you actively require a MiTM scenario, which is understandable, but then what are the steps to actually downgrade the cipher spec?
As a MiTM, if you try to alter the messages between client/server (i.e. to downgrade the CipherSpec), surely due to the nature of SSL the client would get a notification that the messages aren't from the intended source?
Or does the attacker change the CipherSpec of a client/server for all connections and simply sniff the traffic between them?
Or do you need to combine this with another SSL vulnerability to trick the client into thinking you are the source and therefore it can trust messages between you?
