4 ms·
As the other comment said, HTTPS does prevent this, and this only happens on HTTP pages. > Do we, as a community, have any mechanism to detect if these sorts o
by mholt 9y ago
As the other comment said, HTTPS does prevent this, and this only happens on HTTP pages.
> Do we, as a community, have any mechanism to detect if these sorts of attacks are occurring?
Yes, Caddy can detect whether a connection is being MITM'ed: https://caddyserver.com/docs/mitm-detection https://caddyserver.com/docs/mitm-detection
- thisacctforreal 9y agoAs that page describes, Caddy's detection only works on SSL-served pages, by comparing the TLS Handshake, to the expected TLS Handshake pattern of the advertised User-Agent.
- yjftsjthsd-h 9y agoIronically, if you're using Caddy, I struggle to think why you wouldn't already be pure HTTPS.
- mholt 9y agoYes, and it is fair to assume that a page served over HTTP is not trustworthy in any case.
- thisacctforreal 9y agoYup, but "these attacks" in your first post was specifically HTTP modification, which is the only thing Comcast is capable of doing.