3 ms·
If there's still any doubt that encrypting everything is the right way to go for internet protocols: Huge: @Citizenlab catches ISPs invisibly redirecting downl
by Aissen 9y ago
If there's still any doubt that encrypting everything is the right way to go for internet protocols:
Huge: @Citizenlab catches ISPs invisibly redirecting download requests for popular programs, injecting them with government spyware. Unencrypted web traffic is now provably a critical, in-the-wild vulnerability. 20-30% of top internet sites affected.
https://twitter.com/Snowden/status/972110541408952320 https://twitter.com/Snowden/status/972110541408952320
- symtos 9y agoThe ISP in question is in Turkey, so it should probably be noted that the Turkish government has a root cert trusted by both Mozilla and Microsoft. https://ccadb-public.secure.force.com/mozilla/IncludedCACertificateReport https://ccadb-public.secure.force.com/mozilla/IncludedCACert... https://social.technet.microsoft.com/wiki/contents/articles/51151.microsoft-trusted-root-certificate-program-participants-as-of-january-30-2018.aspx https://social.technet.microsoft.com/wiki/contents/articles/...
- upofadown 9y agoPretty sure that such a root cert would be fairly quickly yanked if they got caught using it for MITM attacks. That would cause a lot of trouble for the primary users of such certs. Such attacks are best done with some relatively obscure and unimportant compromised certificate authority.