3 ms·
Good luck with that once hsts, cert pinning, and TLS 1.3 become more common.
by Godel_unicode 8y ago
Good luck with that once hsts, cert pinning, and TLS 1.3 become more common.
- jwilk 8y agoMiTM proxying TLS 1.3 connections works just fine. Browsers ignore cert pinning when the CA certificate was manually installed, so this is not a problem either. I have no idea what HSTS is doing on your list.
- Godel_unicode 8y ago> I have no idea what HSTS is doing on your list. https://moxie.org/software/sslstrip/ https://moxie.org/software/sslstrip/
- jwilk 8y agoWe're talking about voluntarily installed proxy. Why would anyone want to mount an HTTPS stripping attack against themselves?