3 ms·

How would a mitm proxy have a valid certificate for slack.com?

• dwild 5y ago
  > a compromised corporate MITM proxy A corporate MITM proxy does has it own certificate authority, or else it wouldn't be able to monitor its traffic like it's expected to do.
  • foxpurple 5y ago
    Doesn’t certificate pinning break these?
    • tyingq 5y ago
      It does, but HPKP is effectively dead, removed from most browsers.