3 ms·
Bear in mind that when students and employees are on their school/work network, they often have to accept the network admin's certificate authority in order to
by Uehreka 7y ago
Bear in mind that when students and employees are on their school/work network, they often have to accept the network admin's certificate authority in order to be allowed to connect to the network. So effectively, the network admin can spoof SSL certificates and MITM traffic, even if it's encrypted.
- pmontra 7y agoIf that's part of the threat model, a layer 7 protocol can encrypt and sign the payload. Then anybody terminating the connection wouldn't be able to read and modify messages. There are also replay attacks and probably many other issues I can't think about. Maybe some IM protocol already deals with that.