3 ms·
> How viable is the interception a http-to-https redirect page? It can be very powerful if done maliciously: https://www.youtube.com/watch?v=MFol6IMbZ7Y https
by schoen 9y ago
> How viable is the interception a http-to-https redirect page?
It can be very powerful if done maliciously:
https://www.youtube.com/watch?v=MFol6IMbZ7Y https://www.youtube.com/watch?v=MFol6IMbZ7Y
(This kind of attack is a primary motivation for the existence of HSTS.)
- ktta 9y agoRelevant part starts here https://youtu.be/MFol6IMbZ7Y?t=23m17s https://youtu.be/MFol6IMbZ7Y?t=23m17s Although for anyone interested in HTTPS, I'd recommend watching the whole thing. Very entertaining.