A new technique has been unveiled that can attack the SSL/TLS and other secure channels purely in the browser to expose encrypted email addresses, Social Security numbers and other sensitive data.

Read more here