3 ms·
Yikes.. So compromise a public wifi and MITM + store any traffic pointed at the affected domain(s), then simply sign up for their own ERP account, download the
by moondev 9y ago
Yikes.. So compromise a public wifi and MITM + store any traffic pointed at the affected domain(s), then simply sign up for their own ERP account, download the key and decrypt.
- willstrafach 9y agoOnly if PFS is not in use though.
- kbirkeland 9y agoMost public wifi hotspots I've seen are unencrypted, so there'd be no need to do a MitM - just be within range to decode the client and AP transmissions.
- moondev 9y agoEven on an unsecured network would the transmissions not be encrypted via tls from your computer to the server?