3 ms·
> Doing this against bitcoin.org is probably taking a pretty big risk. Although it wasn't by hijacking the public key infrastructure, it is worth noting that C
by chrisfosterelli 10y ago
> Doing this against bitcoin.org is probably taking a pretty big risk.
Although it wasn't by hijacking the public key infrastructure, it is worth noting that China has demonstrated in the past they have no issue performing country-wide man-in-the-middle attacks against a single site [1]. Given that some CA's are Chinese, it is not that unbelievable unfortunately...
[1]: http://www.pcworld.com/article/2908912/chinas-great-cannon-ddos-tool-enforces-internet-censorship.html http://www.pcworld.com/article/2908912/chinas-great-cannon-d...
- JoshTriplett 10y agoTrue, but that attack used an HTTP resource. An HTTPS MITM attack burns a CA; browsers will remove it from their trust stores. And we're getting close to the point that it can't go undetected, either; once browsers enforce Certificate Transparency for all CAs, it'll no longer be possible to conduct an undetected MITM attack.