3 ms·
They can still do that under SSL/TLS with a MITM attack.
by jemfinch 11y ago
They can still do that under SSL/TLS with a MITM attack.
- mrsteveman1 11y agoThat's an active attack though, making it significantly more difficult to sniff passwords than it would be without TLS
- pfg 11y agoHow is that? Unless you're accepting self-signed certificates, that seems hard to pull off unless you're a state actor.
- deleted 11y ago[deleted]
- admax88q 11y agoI guess we can turn SSL/TLS off of your gmail then eh?