4 ms·
If some interns running a corporate intranet can get a transparent htts proxy, what's stopping an ISP from rewriting your https traffic?
by ben0x539 14y ago
If some interns running a corporate intranet can get a transparent htts proxy, what's stopping an ISP from rewriting your https traffic?
- sjwright 14y agoYour browser, for one. What you describe is the very definition of a MITM attack, regardless of proxy structure. Your bank, for another. Indeed there are far too many parties with an interest in keeping https secure, that you needn't worry about it.
- kbhomes 14y agoBecause using Comcast using an HTTPS proxy to rewrite traffic means that your browser will expect data encrypted with Google's, Facebook's, Chase's, etc. certificate when it actually receives Comcast's proxy certificate. Every HTTPS site would prompt the user about an SSL certificate error.