5 ms·
Chrome's pinning logic is disabled for connections where the signing cert was added to the trust store by a user, I think largely in part to avoid breaking thes
by moxie 14y ago
Chrome's pinning logic is disabled for connections where the signing cert was added to the trust store by a user, I think largely in part to avoid breaking these type of corporate MITM proxies.
So if you want to watch the traffic, it should be as simple as MITMing yourself with a cert you add to the Chrome trust DB.
- loeg 14y agoI don't want my corp firewall spying on net traffic, so I don't add them to the trusted CAs DB. It would be slightly more palatable if the firewall did cert validation on the other side of things… but they don't.