http://www.educatedguesswork.org/2009/11/understanding_the_tls_renegoti.html

explains Marsh Ray’s attack in details, pls patch to fix the TLS protocol