32 ms·
> your traffic to Google is TLS, so you have an excellent guarantee that it's impossible to snoop on the contents of your HTTP requests at the network level. I
by tekknik 4y ago
> your traffic to Google is TLS, so you have an excellent guarantee that it's impossible to snoop on the contents of your HTTP requests at the network level.
It’s definitely not impossible, MITM attacks work for TLS and this is exactly how cloudflare work (it MITMs TLS sites by terminating the tunnel and recreating.). TLS is only secure if you have pinned certs.
- tsimionescu 4y agoMITM for TLS only works if you have the cooperation of the server owner (like Cloudflare does, or illegally be stealing the server owner private keys) or a malicious CA, or if you ignore the security errors that the browser offers. Otherwise, TLS is completely impervious to MITM attacks as a protocol. Of course, various implementations of TLS may also have exploitable vulnerabilities.
- tekknik 4y agoI’m not sure what you refuted here, you seem to have said exactly the same thing I did.