3 ms·
So it took them only two weeks to take advantage of Firefox's new policy to automatically "fix"[1] man in the middle attacks through enterprise/antivirus CAs. A
by jupp0r 7y ago
So it took them only two weeks to take advantage of Firefox's new policy to automatically "fix"[1] man in the middle attacks through enterprise/antivirus CAs. As expected, this "convenience" will make us all less safe :(.
[1] https://blog.mozilla.org/security/2019/07/01/fixing-antivirus-errors/ https://blog.mozilla.org/security/2019/07/01/fixing-antiviru...
- jopsen 7y agoIf an attacker can install a CA on the system, the attacker can probably also apply binary modifications to Firefox. Or replace it with a compromised version.
- jupp0r 7y agoIt can be an authoritarian government arm twisting you into installing it voluntarily, as the article proves.
- closeparen 7y agoWhich they could also do with software, or even hardware via import controls.