4 ms·
They could just MITM all connections and say 'for compatibility reasons, please install this root certificate'. With a fee, this requirement could then be waiv
by rocqua 10y ago
They could just MITM all connections and say 'for compatibility reasons, please install this root certificate'.
With a fee, this requirement could then be waived.
Dystopian but technically possible.
- narrowrail 10y agoThis type of hypothetical drives me batty, and I was tempted to be snarky. I'm not sure how to respond to the idea that there will ever be a time your ISP requires root cert installation for service, but I will be finding a way to launch a WISP of my own at that point.
- rocqua 10y agoMy original was already snark. Though I don't think its impossible that a small amount of non-technical people might actually be convinced to do this.
- pdkl95 10y agoIt's only slightly hypothetical. http://www.csoonline.com/article/2865806/cloud-security/gogo-inflight-internet-serves-up-man-in-the-middle-with-fake-ssl.html http://www.csoonline.com/article/2865806/cloud-security/gogo... Gogo didn't require installing a root cert, but they DID issue forged certificates to MitM connections to *.google.com (and others). Also, remember "Superfish"? Their root cert was pre-installed by Lenovo.