3 ms·
> That's assuming the box can generate certificates trusted by the target machines - there's a reason the CN field exists. If you're dumb enough to install one
by ardy42 8y ago
> That's assuming the box can generate certificates trusted by the target machines - there's a reason the CN field exists.
If you're dumb enough to install one of these boxes on your network, you might also be dumb enough to install an attacker-provided root certificate on your PC.
- VMG 8y agoBut if you ask your user to install a CA, why not simply ask him to install malware? Is it to circumvent antivirus?