3 ms·
If you can forge certs for HTTPS-protected sites, this is not what you would use them for.
by Godel_unicode 10y ago
If you can forge certs for HTTPS-protected sites, this is not what you would use them for.
- Kalium 10y agoIt's part of what I would use them for. A big, splashy attack distracts a bunch of people while you MITM something important with a forged cert? Great way to steal a bunch of credentials with something that leaves relatively few traces while the security people are distracted.