3 ms·
How does this work technically? I understand that by making people install the government cert, any website with a cert signed by that government cert will hap
by adsadasdas 7y ago
How does this work technically?
I understand that by making people install the government cert, any website with a cert signed by that government cert will happily speak TLS.
But, how can they read data transmitted between websites they don't control? When the client asks for Facebook's cert, wouldn't the government have to sneak in and show a fake cert signed by them instead? How does that work?
- balowria 7y agoIt can probably work as MITM. The ISP or whoever controls your net traffic needs to generate a fake certificate(signed by a trusted root cert) for a site you are browsing. Refer example in: https://en.wikipedia.org/wiki/Man-in-the-middle_attack https://en.wikipedia.org/wiki/Man-in-the-middle_attack