3 ms·
Because it’s easier that the server be MITMed for a shorter duration to prevent discovery[1]. It’s also easier if you can just strong arm the CA to issue a cert
by supriyo-biswas 2y ago
Because it’s easier that the server be MITMed for a shorter duration to prevent discovery[1]. It’s also easier if you can just strong arm the CA to issue a certificate or have the shady CA issue it[2][3].
[1] http://notes.valdikss.org.ru/jabber.ru-mitm/ http://notes.valdikss.org.ru/jabber.ru-mitm/
[2] https://www.wired.com/2010/03/packet-forensics/ https://www.wired.com/2010/03/packet-forensics/
[3] https://bugzilla.mozilla.org/show_bug.cgi?id=1391063 https://bugzilla.mozilla.org/show_bug.cgi?id=1391063