3 ms·
"Man In The Middle attacks are increasing and users usually ignore error messages about them" Note that the reported MiTM attack should not result in a popup w
by mrb 15y ago
"Man In The Middle attacks are increasing and users usually ignore error messages about them"
Note that the reported MiTM attack should not result in a popup warning, because the CA certificate used in the MiTM is supposedly technically valid. Does anybody know which browsers include this CA? Browser vendors should consider removing it based on ethical concerns, especially if this MiTM attack is being performed very broadly, at the country level.
- deleted 15y ago[deleted]
- mcpherrinm 15y agoMozilla is spinning up new releases to remove the cert. See http://blog.mozilla.com/security/2011/08/29/fraudulent-google-com-certificate/ http://blog.mozilla.com/security/2011/08/29/fraudulent-googl... Instructions on how to delete it yourself are available at http://support.mozilla.com/en-US/kb/deleting-diginotar-ca-cert http://support.mozilla.com/en-US/kb/deleting-diginotar-ca-ce...
- shabble 15y agoThey really ought to add a search field to that list view.