3 ms·
Not if the app and or website use certificate pinning or hsts and you want to use the device on a different network as well, e.g. phones and laptops.
by spockz 8y ago
Not if the app and or website use certificate pinning or hsts and you want to use the device on a different network as well, e.g. phones and laptops.
- black-tea 8y agoI don't think a website can decide to use public key pinning can it? But the client/browser can. Google won't let you route their traffic through a proxy (chrome does public key pinning for Google).
- bpye 8y agoWebsites can but apparently Chrome and Firefox ignore incorrect certs when the presented cert is from a user installed CA [1]. I guess this is to allow firewalls to MITM the traffic. [1] - https://developer.mozilla.org/en-US/docs/Web/HTTP/Public_Key_Pinning https://developer.mozilla.org/en-US/docs/Web/HTTP/Public_Key...
- youcandev 8y agoHSTS would need to be disabled in all browsers for all clients to allow for mitm proxy. I’ve seen it done in corporate environments.
- deleted 8y ago[deleted]
- spockz 8y agoSo in order to prevent seeing ads we are opening ourselves up to other vulnerabilities. This might be a choice some tech minded people can make but is definitely not something for the masses.