5 ms·
Pretty much impossible, would need to defeat https/ct. You would have to spoof *.google.com within chrome.
by lyu07282 2y ago
Pretty much impossible, would need to defeat https/ct. You would have to spoof *.google.com within chrome.
- jandrese 2y agoSo if you install your own certificate authority and then spoof the DNS it might be possible? Not so useful as an attack vector, but potentially useful for people who want to do fun things with the browsers they own.
- explaininjs 2y agoYou can just expose the data to all sites with your own extension if you have access to the device.
- deleted 2y ago[deleted]
- etc-hosts 2y agocertificate pinning would prevent this for google related domains.
- lyu07282 2y agoThis. I think chrome is now using something called certificate transparency, but it has the same effect it won't trust your own installed CA for google.com https://en.wikipedia.org/wiki/Certificate_Transparency https://en.wikipedia.org/wiki/Certificate_Transparency