...security exits or authentication through SSL, unless anattacker has valid authentication credentials or a valid SSL certificate...invoked fairly early on in the channel negotiation. If anattacker’s connection is rejected by either SSL or a security...
http://t-rob.net/