7 ms·
Unfortunately the author didn't use mitmproxy (or sslstrip).
by slashdotaccount 13y ago
Unfortunately the author didn't use mitmproxy (or sslstrip).
- eli 13y agoOne would hope sslstrip would not work against an app!
- jiayo 13y agoYou'd be surprised how much code out there "uses SSL" but to get it to "just work", it outright ignores things like DN checking, certificate expiry, even chain verification. It's on the faulty premise that encryption is the only thing that's important.