3 ms·
This is one of the many reasons to use an extension that forces SSL on every website that supports it. It's possible to MITM SSL, but it would throw all kinds
by SeoxyS 15y ago
This is one of the many reasons to use an extension that forces SSL on every website that supports it.
It's possible to MITM SSL, but it would throw all kinds of security warnings on the client and prevent this kind of tampering.
Note: I'd recommend SSH tunneling, or using a VPN, but there's quite a bit more work involved here, so for the install-and-forget crowd, SSL is already a huge improvement.
- Steko 15y agorelevant: https://www.eff.org/https-everywhere https://www.eff.org/https-everywhere
- Genmutant 15y agoAlso: https://code.google.com/p/https-finder/ https://code.google.com/p/https-finder/ HTTPS Finder automatically detects and enforces valid HTTPS connections as you browse, as well as automating the rule creation process for HTTPS-Everywhere