2 ms·
I haven't tried it, but it should be possible to MITM SSL for your own machines since you have control over trusted certificate authorities. There might be a b
by heroprotagonist 9y ago
I haven't tried it, but it should be possible to MITM SSL for your own machines since you have control over trusted certificate authorities.
There might be a better article if you search deeper than I did to come up with a quick link, but here:
https://blog.heckel.xyz/2013/07/01/how-to-use-mitmproxy-to-read-and-modify-https-traffic-of-your-phone/ https://blog.heckel.xyz/2013/07/01/how-to-use-mitmproxy-to-r...
- zo1 9y agoLooks like a very nice find! I'll definitely be having a look at it, thank you.
- cjbprime 9y agoI haven't tried it either, but many big name sites use certificate pinning to avoid the attacking form of this MITM.
- mseebach 9y agoA manually trusted cert overrides pinning, it's only protecting against certs signed by another of the default installed certs (otherwise Google and others simply wouldn't work in many corporate environments).