3 ms·

I think it's great that Mozilla made it difficult to use self-signed certs. Most people don't use them correctly, and making self-signed essentially off limits

I think it's great that Mozilla made it difficult to use self-signed certs. Most people don't use them correctly, and making self-signed essentially off limits to people is a great increase in security. You should try using ettercap. It's surprisingly easy to intercept all traffic going to and from a self-signed site.

ars 17y ago
It's easy to use ettercap to mount a man-in-the-middle attack? Self-signed certs are only vulnerable to mitm attacks, but don't most network topologies make doing that pretty hard?
- tptacek 17y ago
  No. Anyone who can see a DNS query can hijack traffic.