No more difficult at all.  A MITM is a MITM.  The atack is the same and intteger-store-bought certificates make the process  neither more nor less complicated. Sent from Samsung Mobile -------- Original message -------- From: William Herrin <bill@herrin.us> Date: To: George Herbert <george.herbert@gmail.com> Cc: John Levine <johnl@iecc.com>,nanog@nanog.org Subject: Re: Gmail and SSL