4 ms·
I personally think certificate transparency and Expect-Ct headers will do far more to detect China-in-the-middle. Nothing is more embarrassing than getting cau
by jopsen 8y ago
I personally think certificate transparency and Expect-Ct headers will do far more to detect China-in-the-middle.
Nothing is more embarrassing than getting caught with your fingers in the cookie jar.
Besides I trust CAs will be de-listed if proven compromised.
- tinus_hn 8y agoChina would only be annoyed if you made it out to be a bad thing. Everybody knows that, like the US, they snoop up any information they can get their hands on. Which makes it even more likely they didn’t do an active attack because there’s more chance of being caught if you don’t care.