3 ms·
Test how many SSL connections go the extra mile and secure themselves against Man in the Middle attacks. You'll be surprised.
by dirkt 8y ago
Test how many SSL connections go the extra mile and secure themselves against Man in the Middle attacks. You'll be surprised.
- thegeomaster 8y agoAll of them, since that's an explicit design goal of SSL/TLS?
- cube00 8y agoIf a user wants their free wifi enough they'll be happy to click through those pesky warnings that the root cert is not trusted. They'll probably not think anything of it if it loads as normal, even with a big angry red cross. The speed at which users rip though Windows UAC warnings is astonishing.
- _verandaguy 8y agohttps:// https:// with no extra options is still very much prone to downgrade/stripping attacks, and first-time connections to an https:// https:// site are particularly vulnerable since a lot of the extra hardening options (HSTS in particular) can be nullified through TOFU.