3 ms·

Without certificate pinning, I'm not sure that SSL everywhere is really going to help. Larger ISPs or corporate networks will just get pushed more into the arms

Without certificate pinning, I'm not sure that SSL everywhere is really going to help. Larger ISPs or corporate networks will just get pushed more into the arms of companies like Bluecoat that provide proxies to effectively man-in-the-middle SSL traffic.

nsgi 9y ago
Certificate pinning won't stop that either. Most browsers e.g. Chrome ignore pinning rules if the certificate is installed on the device by the user (or their employer).
tomjen3 9y ago
An ISP would have to get you to install a cert if they tried something like man-in-the-middle.