3 ms·
Question: with a stolen private key don't you still have the problem that is has the host name in it? So to truly spoof a browser you need to compromise the dom
by justinhj 13y ago
Question: with a stolen private key don't you still have the problem that is has the host name in it? So to truly spoof a browser you need to compromise the domain and serve a site from within it?
- mpyne 13y agoIt depends on what you're going after, but if you're just targeting a local subnet, that's what a "man-in-the-middle" attack is for. What is probably easier is somehow redirecting the DNS entry for the target site to point to your malware-serving site, which has happened before as well.