Bruce Schneier summarizes the current Man-in-the-Middle Attacks Against SSL: http://www.schneier.com/blog/archives/2010/04/man-in-the-midd_2.html