3 ms·
> I was kinda hoping to find a way to MITM devices that don't allow the installation of custom CA's The point of TLS is to prevent that... You'd be relying on
by denkmoon 3y ago
> I was kinda hoping to find a way to MITM devices that don't allow the installation of custom CA's
The point of TLS is to prevent that... You'd be relying on implementation flaws if it were ever achieved.
Frankly I expect the days of being able to install our own trusted certificates are numbered on the few devices that do currently allow it.
- phito 3y agoI know that's the point, and I hate it. :)
- throwitaway156 3y agoWhile i agree that TLS will probably be used more restrictively over the years, corporate use should hold back a self-signed CA crackdown.
- goalieca 3y ago> Frankly I expect the days of being able to install our own trusted certificates are numbered on the few devices that do currently allow it. For iot security reasons, namely trying to stop persistence of exploits, secure boot features on arm processors will become widely used. Think of it like TPM chips. This will make it much harder to “own your” device.