3 ms·
... but you need to MITM server to obtain certificate, and if you can MITM server, why bother with user's wifi?
by theamk 2y ago
... but you need to MITM server to obtain certificate, and if you can MITM server, why bother with user's wifi?
- supriyo-biswas 2y agoBecause it’s easier that the server be MITMed for a shorter duration to prevent discovery[1]. It’s also easier if you can just strong arm the CA to issue a certificate or have the shady CA issue it[2][3]. [1] http://notes.valdikss.org.ru/jabber.ru-mitm/ http://notes.valdikss.org.ru/jabber.ru-mitm/ [2] https://www.wired.com/2010/03/packet-forensics/ https://www.wired.com/2010/03/packet-forensics/ [3] https://bugzilla.mozilla.org/show_bug.cgi?id=1391063 https://bugzilla.mozilla.org/show_bug.cgi?id=1391063