4 ms·
Not just intercept: Using HTTPS prevents messing with the connection in-flight. So an attacker won't be able to inject their own payload into that web page you
by riskable 6y ago
Not just intercept: Using HTTPS prevents messing with the connection in-flight. So an attacker won't be able to inject their own payload into that web page you just requested.
- CountSessine 6y agoExcept you’re using garbage certificates so anyone could MITM you and inject whatever they like.
- bavell 6y agoIn what way are self-signed certs garbage? They're essentially the same as ssh certs.
- deleted 6y ago[deleted]
- samus 6y agoThat's a separate kind of attack, not intrinsic to the protocol. If the keypair got leaked or a CA misbehaves and issues multiple certificates that can be used for a host, then yes, it can happen.