3 ms·

can you explain further?

• bayindirh 4y ago
  Two things have happened in the past. Scenario a: 1. Navigate to https://www.example.com https://www.example.com 2. Arrive at https://www.completelyunrelated-adsite.com https://www.completelyunrelated-adsite.com while your address bar reads https://www.example.com https://www.example.com They used to do this regardless of your DNS. They directly hijacked that stream/connection. Scenario b: 1. Navigate to https://www.example.com https://www.example.com 2. Get https://www.example.com https://www.example.com with an ad-banner on top. They happened rarely, and never survived a reload or further navigation. They completely stopped after a while. I have a 4G modem from my mobile carrier. They inject a info popup when I receive an SMS or any other notification' if they can manage it. It's very rare now, too.
  • cortesoft 4y ago
    Scenario A is impossible and has been impossible for as long as https has been a thing. The only way it would be possible is if you installed a root cert from your ISP onto your computer so that it would trust a cert issued by them. Otherwise, they would not have a valid cert for example.com and you would be presented with a cert error. This is literally the exact thing https was designed to prevent. It is and always has been impossible (again, unless the client machine is administered by the ISP or whoever the middleman is, and they can install a cert on the machine)
    • GoblinSlayer 4y ago
      It's possible if the connection goes through an http proxy.