3 ms·
Yes, they can install certificates that enable MitM. That's one reason why I never use custom clients for VPN services. That is, no binaries. I just get the O
by mirimir 7y ago
Yes, they can install certificates that enable MitM.
That's one reason why I never use custom clients for VPN services. That is, no binaries.
I just get the OpenVPN PKI stuff, and use stock OpenVPN.
- SahAssar 7y ago> Yes, they can install certificates that enable MitM. Well, only if you give them permission to. Just use a non-provider specific client and you're okay.
- mirimir 7y agoI don't use them, so I don't know whether they'd ask specifically about the TLS cert. It might just be something about "web security" or whatever. And about using stock clients, that's what I said :) From openvpn.net or in Linus distros or in pfSense, for example.