4 ms·
Wouldn't this involve breaking the trust chain? You can't just redirect HTTPS traffic to a separate host with a different key. If the government demanded the pe
by Manuel_D 2y ago
Wouldn't this involve breaking the trust chain? You can't just redirect HTTPS traffic to a separate host with a different key. If the government demanded the peer's private key then this is possible. But you can't just arbitrarily redirect traffic without resulting in a cert error.
- eddd-ddde 2y agoYou don't even have to ask the peer. Because of the same chain of trust, you can just ask the root authority to give you a certificate for peer's identity.