3 ms·
Interesting. I'm going to be traveling to the UAE soon. If I assume that Etilsalat has in fact issued itself HTTPS certs for secure sites that I visit, and is d
by staktrace 16y ago
Interesting. I'm going to be traveling to the UAE soon. If I assume that Etilsalat has in fact issued itself HTTPS certs for secure sites that I visit, and is doing some sort of MITM attack, is there any way for me to detect and/or prevent it?
- tptacek 16y agoYes, mostly; you can always click the "lock" icon in your browser. You shouldn't see an Etisalat/Comtrust certificate anywhere for the sites you normally use. This is probably not bulletproof, but, probably, neither are Etisalat's snooping tools.
- jberryman 16y agoNot to go all cypherpunk, but you can pretty easily create an encrypted SOCKS proxy tunnel using an OpenSSH client. So if you have an SSH server in a country you trust, you can tunnel your browser traffic through there for connections you are nervous about. first link from google: http://embraceubuntu.com/2006/12/08/ssh-tunnel-socks-proxy-forwarding-secure-browsing/ http://embraceubuntu.com/2006/12/08/ssh-tunnel-socks-proxy-f... EDIT: clarity