2 ms·
By having an already trusted CA cert on the client. But that would involve a really elaborate attack by an APT (having for instance a stolen CA that's still val
by pieter_mj 3y ago
By having an already trusted CA cert on the client. But that would involve a really elaborate attack by an APT (having for instance a stolen CA that's still valid).