25 ms·
But how doe they get access to the keys for the session without modifying the end hosts or MITM'ing the traffic?
by anonymousDan 10y ago
But how doe they get access to the keys for the session without modifying the end hosts or MITM'ing the traffic?
- 4ad 10y ago> without modifying the end hosts They have full control of the end hosts. That's why the group policy forces you to use Internet Explorer instead of letting you use Firefox.
- anonymousDan 10y agoHmm, but why can't they just then record the session keys as before even for forward secure TLS (presuming we are talking about clients inside the bank initiating TLS sessions to external parties)?
- ChoHag 10y agoAh well they're banks you see and "doing things" requires spending money which they're rather averse to. Also never use the word just outside the context of law.