3 ms·
"client developer not properly verifying the server certificate" makes it sound possible, but I think I understand the problem now maybe. The 3rd party CA may
by 0xdeadbeefbabe 11y ago
"client developer not properly verifying the server certificate" makes it sound possible, but I think I understand the problem now maybe.
The 3rd party CA may have issued a cert to malicious party that issued another cert to their man in the middle.
You can't be sure unless you are your own CA, but then you aren't a 3rd party anymore.