3 ms·
Well if you control the domain you can easily get an SSL cert (except some clients might pin the CA for google.com).
by 0x0 11y ago
Well if you control the domain you can easily get an SSL cert (except some clients might pin the CA for google.com).
- nly 11y agoIIRC, all Chrome users are pinned for *.google.com
- LgWoodenBadger 11y agoHowever, chrome will still trust certs issued for Google domains that come from non-Google trusted issuers (things in your local trusted keystore) It sucks because now your employee can MITM you for gmail/google chat/etc
- HappyTypist 11y agoCertificates are pinned too.