Conversation:
Notices
-
MITM cert software is all too common. There's a whole ecosystem of vendors selling MITM "solutions" to corporations. And since nobody ever checks the cert details when they're browsing with https, nobody realizes they've been compromised. Never do your banking from your employer's computer! The whole hierarchical PKI of certs, CAs and browsers is completely broken. !surveillance !security
-
I've heard corporate IT types say "the fundamental underlying problem" with #endtoend !security is that it's secure end-to-end: http://www.cisco.com/web/about/ac123/ac147/archived_issues/ipj_12-3/123_security.html
-
@der @bobjonkman Not just your employer's computer. I used to get catalogs of MITM appliances sent to me at work. The vendors were targeting chains of #coffee shops and eateries that offered #WiFi access. I suspect you're being MITM'd every time you use Internet at a hotel, too.
-
@lnxw48, that's #disturbing. What's the rationale for coffee-shops #MITM'ing their clientele, anyway?
-
@rozzin The vendors' main argument was legal compliance.
Former Bob Jonkman -- Please use the new server at https://gs.jonkman.ca
Joshua Judson Rosen
lnxw48 (Linux Walt)
All the Education Posse content and data are available under the