3 ms·
> mostly about the illusion of security. To this day I'm left with the impression that some sort of MITM attack would be possible through the creative abuse of
by vagrantJin 5y ago
> mostly about the illusion of security. To this day I'm left with the impression that some sort of MITM attack would be possible through the creative abuse of certificate issuers and proxies since there is no direct means of verifying the certificate is authentic
Why would a bank's customer support agent know about encryption? Usually IT is a siloed function in most banks.
- marcosdumay 5y agoIn a sane world, the bank would have a flier for the teller to give to the GP with several ways to verify the bank's key. We only live without this because the bank can just reverse transactions when there is a problem and the police will fall pretty heavily on anybody that exploits the weakness. And also, because there are plenty of easier to exploit ones.