|visits||member for||1 year, 7 months|
|seen||Apr 12 '13 at 9:45|
Poor man's SSL - is this method as safe as SSL/TLS?
If you want to combine symmetric cipher and MAC instead of using a authenticated cipher mode, it seems you should use "encrypt-then-mac" which is always secure (as opposed to "mac-then-encrypt" or "encrypt-and-mac" which may in some cases). That is you should send : E(m) || S(E(m)) where E is encrypt and S is MAC as opposed to E(m)||S(m) (encrypt-and-mac)