3 ms·

As far I understand the issue is encryped client hello. > Can't enterprises just MITM the traffic and sign it with a CA the clients trust? What's the benefit o

As far I understand the issue is encryped client hello. > Can't enterprises just MITM the traffic and sign it with a CA the clients trust? What's the benefit of the previous solutions? This wont work with cert pinning and also is a lot more expensive

Avamander 3y ago
Boo-hoo? If it's not your endpoint then it's not yours to intercept and analyze?
- dilyevsky 3y ago
  Did you miss the part where it says “enterprise”?
  - Avamander 3y ago
    I certainly can't see the part where saying "enterprise" should grant me the right to intercept and analyse someone's traffic.