3 ms·
MiTM proxying TLS 1.3 connections works just fine. Browsers ignore cert pinning when the CA certificate was manually installed, so this is not a problem either
by jwilk 8y ago
MiTM proxying TLS 1.3 connections works just fine.
Browsers ignore cert pinning when the CA certificate was manually installed, so this is not a problem either.
I have no idea what HSTS is doing on your list.
- Godel_unicode 8y ago> I have no idea what HSTS is doing on your list. https://moxie.org/software/sslstrip/ https://moxie.org/software/sslstrip/
- jwilk 8y agoWe're talking about voluntarily installed proxy. Why would anyone want to mount an HTTPS stripping attack against themselves?