4 ms·
> You can create a self-signed certificate for Google domains and trust it on your machines. Then you can MITM. Can you point to or write up a blog post with a
by inetknght 7y ago
> You can create a self-signed certificate for Google domains and trust it on your machines. Then you can MITM.
Can you point to or write up a blog post with a proof of concept?
- cpach 7y agomkcert[1] is probably the easiest way to generate root certificate and leaf certificate(s). Then you can use a proxy like Squid to intercept the traffic[2]. You’d also need a local DNS server to point hosts like fonts.googleapis.com to your own web server. https://github.com/FiloSottile/mkcert https://github.com/FiloSottile/mkcert https://turbofuture.com/internet/Intercepting-HTTPS-Traffic-Using-the-Squid-Proxy-in-pfSense https://turbofuture.com/internet/Intercepting-HTTPS-Traffic-... [Edit: Now that I think of it, I’m not sure if Squid is really required...]