What advantage would an attacker have in attacking a web server using the SSL protocol?

The web server trusts the client because they are using the same secret key.

The attacker needs to generate just one encryption key for all his requests.

The Client can cause the ssl web server to use a weak encryption algorithm.

The encrypted session makes It harder for an Intrusion Detection System to detect.