3 ms·

I agree it is "pretty much standard" but the ISPs and other network providers are not doing this with TLS traffic. They are only injecting the scripts in HTTP

I agree it is "pretty much standard" but the ISPs and other network providers are not doing this with TLS traffic. They are only injecting the scripts in HTTP requests without TLS, at least in my experience.

tekknik 7y ago
Cox is absolutely MITM this too. HTTP/HTTPS it doesn’t matter. Terminate the tunnel, forge a cert and QED.