3 ms·
The browser would still need to trust the fake CA, which means pwning the victim's computer i.e. it's already game over at that point.
by corford 9y ago
The browser would still need to trust the fake CA, which means pwning the victim's computer i.e. it's already game over at that point.