I read that SSL encrypts messages in transport .After exit ,it should be raw while reaching the target.So,Messages can be hacked at this stage.?
MAC can be done for the payload so as to ensure that messages are not altered.But I see we are also sending payload along with Hash.So,even in this,messages can be evesdropped after exiting transport layer between applications.
Does Encrypting the whole message with Asymmetric key at sender side will solve such issues?Does it complicate security as we have SSL for transport+Asymmetric key for payload+MAC?
Basically I want to know how sensitive payload can be well secured completely until Target reads the message?
LinkedIn
Twitter
