Well, the short anser is: No.
In most cases SSL data is used in a forward proxy scenario and is actually tunneled to its destination after the connection has been established by the proxy, this means the proxy is unable to read the data of the encrypted seession. There are other possible scenarios (Secure reverse proxying and others) and much of it depends on how things are configured but as long as you are using HTTPS and the connection is being tunneled to the secure content site and not some intermediary site you are probably fine. This is not to say that eavesdropping on a SSL connection cannot be done, merely that its not particularly easy (involves quite a bit of trickery actually although there are known weaknesses in IE's handling of SSL), and even less likely that anyone was eavesdropping on your connection.
-Maestr0




Reply With Quote