3 ms·
>> To date, many malware distribution campaigns launch their attacks by compromising FTP servers Yes.. well, they can do the same by compromising servers that
by wila 5y ago
>> To date, many malware distribution campaigns launch their attacks by compromising FTP servers
Yes.. well, they can do the same by compromising servers that offer the payload via HTTP(S).
At least when the payload is ftp, it stands out and you can catch it in your gateway/firewall devices.
With https you now need https inspection at the border in order to be able to do that. These MITM devices do tend to cause a lot of trouble.
- TonyTrapp 5y agoThis argument reminds me of how Google refuses to show the server-provided login prompt when doing HTTP basic auth in Chrome (and as a consequence, browsers deriving from it). Some developer argued that someone could MITM the connection and make the basic auth login prompt say "please enter your YouTube credentials" or something like that. Yeah right, if you can MITM the connection, you could just as well inject a much more realistic Google login page. Basic auth really wasn't the actual problem at hand.