4 ms·
The driver itself is HTTP, not HTTPS. They were saying they hoped that the HTTPS call which tells it where to download the driver also contained signatures so t
by ekimekim 5y ago
The driver itself is HTTP, not HTTPS. They were saying they hoped that the HTTPS call which tells it where to download the driver also contained signatures so that the later HTTP request could be verified. spoilers: it does not. So you don't need to mitm the HTTPS request, you just wait until they make the follow-up HTTP request, mitm that and serve whatever you want.