|visits||member for||2 years, 4 months|
|seen||Sep 16 at 11:04|
Poor man's SSL - is this method as safe as SSL/TLS?
If you want to combine symmetric cipher and MAC instead of using a authenticated cipher mode, it seems you should use "encrypt-then-mac" which is always secure (as opposed to "mac-then-encrypt" or "encrypt-and-mac" which may in some cases). That is you should send : E(m) || S(E(m)) where E is encrypt and S is MAC as opposed to E(m)||S(m) (encrypt-and-mac)