4 ms·
It'd be interesting if there were a party with a JailBroken iPhone and the Facebook App installed who would check the network traffic.
by madmax96 10y ago
It'd be interesting if there were a party with a JailBroken iPhone and the Facebook App installed who would check the network traffic.
- eric_h 10y agoWould a jailbreak really be necessary for this? Couldn't you just install a certificate on the phone and MitM the https traffic?
- madmax96 10y agoThat would be a lot simpler:)
- superuser2 10y agoNot if the app is certificate pinning (and from a security perspective, it ought to).
- eric_h 10y agoIs this a common thing for apps to do, yet? I was under the impression that there are some corporate networks which treat MitMing ssl connections as a business necessity. Would Facebook et. al. allow their apps to stop functioning on networks like that?
- superuser2 10y agoI can't imagine an enterprise which would MITM employee web browsing but not block Facebook. Come to think of it, I can't imagine an enterprise that would MITM employee web traffic but allow personal smartphones on the network.
- eric_h 10y agoHa. Yes, fair enough. But, presuming they didn't, would it not be in facebook's best interest to allow their app to still work, perhaps with a visible warning?