52 ms·
It would be different if it worked like ssh, where key changes are warned about after the (optional) leap of faith.
by lucian1900 14y ago
It would be different if it worked like ssh, where key changes are warned about after the (optional) leap of faith.
- patio11 14y agoThe SSH model for SSL is a non-starter, because you can MITM bankofamerica.com or Gmail for an hour and find tens of thousands of people who just reinstalled Windows, bought a new iPad, etc etc, and they will fall instantly to your MITM attack. (And -- more's the hilarity -- if they try to go back to bankofamerica.com tomorrow it will look like the bank is trying to MITM them.)
- moonboots 14y agoThe new ssl pinning proposals work very similarly to ssh. When the user visits an https site with pinning enabled, the browser will remember the server's public key similar to ssh's known_hosts. You're correct that this won't protect against a MITM during this first visit and will cause confusion if an attacker pins his fraudulent public key. However, I would argue that pinning provides a large net security gain in practice. The same model of vulnerable initial visit but secure subsequent visits is used in HSTS to prevent ssl stripping attacks.