4 ms·
Not if the website uses CA pinning though?
by martinald 9y ago
Not if the website uses CA pinning though?
- detaro 9y agoAdditionally installed CA certificates override key pinning, for exactly this use case (at least in the major browsers, it's possible some niche ones don't do this)
- cesarb 9y agoThe right question would be "Not if the website uses client certificates though?". As far as I know, TLS connections using client certificates can't be proxied, since the MITM proxy would need to have the client certificate's private key.