4 ms·
MITM in this context is definitely not "breaking encryption". You have two legitimate, untampered-with TLS connections - one from the client to the proxy, one f
by pferde 7y ago
MITM in this context is definitely not "breaking encryption". You have two legitimate, untampered-with TLS connections - one from the client to the proxy, one from the proxy to the destination web server. Nobody is breaking encryption used in these connections.
What this might be considered breaking instead is trust.
- prepend 7y agoI think it’s legally grey. The expectation and design of the interaction is that the channel is secure between client and server. The equipment is owned by the company, not the individual. But the license is between the user and Spotify. The company is accessing the IP without a license and only accessed it by bypassing Spotify’s encryption. I think it’s similar if Safari was MITMing requests without consent from both parties. I’m interested in a legal ruling.