4 ms·
>If I'm using my own device, I want TLS to actually provide security and confidentiality. If that means denying my personal devices access to the corporate netw
by pedrocr 8y ago
>If I'm using my own device, I want TLS to actually provide security and confidentiality. If that means denying my personal devices access to the corporate network, so be it.
That's how middleboxes work already. How could they work any other way? If you don't install the root certificate on the client machine TLS fails as it should. You'd need some generally accepted CA to issue a wildcard certificate for the whole internet if that wasn't the case. Has anyone actually done this?
- stanleydrew 8y agoAs I recall there was a CA that either after external compromise or via a rogue employee issued a cert for *.com at one point. But it is definitely not something any respected CA would do willfully.
- gsnedders 8y agoAnd that's a quick way to get the big root stores to start looking very, very closely at you.