4 ms·
Yeah, so your details are protected from passive wiretapping/MitMing, but not any active attempts (see sslstrip).
by qu4z-2 10y ago
Yeah, so your details are protected from passive wiretapping/MitMing, but not any active attempts (see sslstrip).
- icebraining 10y agoPaypal is on the HSTS preload list, so if you're using a reasonably recent browser version, sslstrip (without changing the domain) shouldn't work.
- qu4z-2 10y agoAh, I didn't know this. Thanks.