infp - 3:28 pm on Jul 31, 2008 (gmt 0)

I didn't want to bring up ettercap, which is completely transparent and doesn't impact your certficate whatsoever.

That software is again useless in this context. There is no way for a man in the middle to impersonate the remote server, unless he has a valid certificate (or the user ignores the warning screen displayed by the browser). Otherwise, believe me, e-commerce would not exist by now.

If the attack works, then either your computer has been compromised or the remote server has been compromised.