title: Is TLS / SSLv3 insecure?
body: <p>Toying with an idea for a F2F networked application I've just been reading up on secure communication.
  I quickly settled with the idea of using TLS / SSL as the basis for any communication since it employs Public Key encryption at the protocol level and thus is perfect for my needs.
  However I was surprised to read (on wikipedia) that the newest version of TLS, SSLv3 uses a mix of MD5 and SHA-1 "because if any vulnerability was found in one of these algorithms the other would prevent it from compromising SSLv3". However, as I take it, lately <i>both</i> have been found flawed !</p>
  
  <p>So my questions are thus:<br />
  Does this not mean that SSLv3 is basically flawed, or am I not reading close enough ?<br />
  And if so does a "secure" alternative to SSLv3 exist ?</p>