3 ms·
> it's going to be difficult to enforce I guess it's just a matter of dropping every connection that you can't MITM, no?
by egeozcan 11y ago
> it's going to be difficult to enforce
I guess it's just a matter of dropping every connection that you can't MITM, no?
- Elhana 11y agoYou don't have to. Proxy handles the request and just gives response back to you signed with national cert. If you don't install it, your browser will just start complaining about every site. At least that is how Bluecoat ProxySG[1] works at my employee. [1] https://bto.bluecoat.com/webguides/proxysg/security_first_steps/Content/Solutions/SSL/ssl_solution.htm https://bto.bluecoat.com/webguides/proxysg/security_first_st...
- voltagex_ 11y agoFunny story, most of the machines / servers at my workplace weren't vulnerable to Heartbleed - but ProxySG was. AFAIK they built their own OS from scratch, too.
- cortesoft 11y agoFor SSL traffic, yes, but that wouldn't stop someone from using a different encryption protocol.
- mil0 11y agocountry wide, this is a loud call for a cloud, distributed proxy provider with a better track record than the telco, to offer tor-like tunnels to at least exit the MITM zone.