2 ms·
Why would they bother doing a TLS handshake with a phony certificate?
by sp332 5y ago
Why would they bother doing a TLS handshake with a phony certificate?
- JonathonW 5y agoIf you were a school or other institutional user using this filtering service (which isn't just marketing to service providers like Vodafone), you'd probably have their root CA installed so your users see the filter error page instead of just an SSL error.
- xmodem 5y agoHow else could they let the end user know what's going on? Due to pinning, it's either present a phony certificate, or completely fail the connection and give the user no indicationo why. Of course, accepting the phony certificate will immediately leak your cookies to the middlebox, along with giving it permission to read any credentials out of local storage. So as an end user you should not accept it.