3 ms·
Yes, you're correct. An unsecured network is not enough. A honeypot wifi that the attacker controls would work, though, because they could just perform a MITM a
by Tainnor 3y ago
Yes, you're correct. An unsecured network is not enough. A honeypot wifi that the attacker controls would work, though, because they could just perform a MITM attack and thus decrypt your TLS traffic.
- Chrisoaks 3y agoThat’s not true either, as they won’t possess https certificates for whatever the domain is and your browser would flag/block you from continuing.
- Tainnor 3y agohuh, if they can MITM your connection, then they can just forward the certificates from the real host.
- Chrisoaks 3y agoThey will be able to view the public certificate but will not be able to sign or decrypt anything because they do not have the corresponding private key, which is never sent over the wire. HTTPS protects against MITM attacks. When the owner of the domain originally obtained a certificate, the obtained signed attestation from a trusted provider that they were able to field requests to that domain. Those requests can come from anywhere and are not possible to MITM. This attestation pertains to a public key/private key pair.
- Tainnor 3y agoYou're right, I misremembered. Thanks for pointing it out.