4 ms·
> unless they perform mitm attacks Which any state-sponsored actor can easily do, of course.
by metachris 10y ago
> unless they perform mitm attacks
Which any state-sponsored actor can easily do, of course.
- MichaelGG 10y agoPlease tell me how Turkey is going to MITM Google on a recurring basis, enough to implement filtering.
- bumblebeard 10y agoBy using a CA they control to generate a fake certificate for Google like they've already "accidentally" done: http://arstechnica.com/security/2013/01/turkish-government-agency-spoofed-google-certificate-accidentally/ http://arstechnica.com/security/2013/01/turkish-government-a...
- gruez 10y agoWhich they can only pull off once before their CA is distrusted. See: how Chinese government CA was restricted to .cn domains only