3 ms·

> a compromised corporate MITM proxy A corporate MITM proxy does has it own certificate authority, or else it wouldn't be able to monitor its traffic like it's

by dwild 5y ago

> a compromised corporate MITM proxy A corporate MITM proxy does has it own certificate authority, or else it wouldn't be able to monitor its traffic like it's expected to do.

foxpurple 5y ago
Doesn’t certificate pinning break these?
- tyingq 5y ago
  It does, but HPKP is effectively dead, removed from most browsers.