3 ms·
Or, what if the user's browser requested a site's public key on its first visit, but required it to be signed with a trusted CA? So to perform a MITM on an SSL
by simonbrown 15y ago
Or, what if the user's browser requested a site's public key on its first visit, but required it to be signed with a trusted CA? So to perform a MITM on an SSL connection, Mallory would have to both infiltrate a CA and MITM the user's connection on their first visit to a site.
- caf 15y agoYou can have this today by running Firefox with the Certificate Patrol plugin.
- simonbrown 15y agoThough the system I suggested lets a site change CA.
- caf 15y agoWhen a site's certificate changes, Certificate Patrol shows you what has changed, including the public key fingerprint. So you easily detect the case when the site changes CA without changing their public key.