4 ms·
Wouldn't you need to trust their certificate?
by jonas-w 4y ago
Wouldn't you need to trust their certificate?
- 10000truths 4y agoYou don't need the certificate to drop connections, it only comes into play if you're trying to impersonate an endpoint.
- MaxBarraclough 4y agobenmmurphy specifically said mitm. jonas-w is correct that this cannot be done as it would require a root certificate.
- benmmurphy 4y agoI said MITM reading the client hello and using SNI sniffing. They are fully rewriting TCP flow not just what NAT does when they adjust the address and ports on the packets. I'm not exactly sure the reason for this. It could just be a technical choice they made. But it does make it easier to flip a switch to do a full MITM that includes decryption using root certificates or using protocol attacks to decrypt traffic.