3 ms·
This will tip the server off as it won't receive the expected cyphertext. By doing a mitm interception with a newly injected public key and re-encrypting with
by dryicerx 17y ago
This will tip the server off as it won't receive the expected cyphertext.
By doing a mitm interception with a newly injected public key and re-encrypting with the real key before sending to server, you can let the client-server carry on a conversation as usual, while you intercept the entire conversation.
[Client] ---(fakekey)---- MITM ----(realkey)---- [Server]
- NateLawson 17y agoI don't think it needs to be that complicated. Just add a new comment field that contains the session key in plaintext. Neither the server nor client ever knows the difference.