3 ms·
HTTPS makes a MiTM attack much harder, because you need to have a valid cert for the host you are spoofing.
by theptip 7y ago
HTTPS makes a MiTM attack much harder, because you need to have a valid cert for the host you are spoofing.
- 3JPLW 7y agoDoesn't the Great Firewall mandate (or at least strongly suggest) that those Chinese-controlled root certs are installed for devices behind it?
- dehrmann 7y agoIf this were a root cert, OSes and browsers could ban that CA. If you want this to work with SSL, giving the Great Firewall a domain cert would be enough.