3 ms·
0.2% Facebook desktop clients access FB via forged SSL certificates
- itistoday2 12y agoNote that in the context of mass surveillance, MITM doesn't apply to Facebook because the NSA and GCHQ simply ask for data as per PRISM: https://en.wikipedia.org/wiki/PRISM_%28surveillance_program%29 https://en.wikipedia.org/wiki/PRISM_%28surveillance_program%...
- ddorian43 12y agowhat about other countries , they have to MITM attack.
- itistoday2 12y agoYes, that's true except that according to a semi-recent Snowden interview many of the European intelligence agencies share information with each other, so they might just get it from NSA/GCHQ [1]. Some of the other large countries might not be as interested in Facebook because they have their own versions of it: Russia's VK, China's Qzone & Renren, Japan's Line, Iran's Cloob, etc. [1] https://www.commondreams.org/headline/2014/01/27-1 https://www.commondreams.org/headline/2014/01/27-1
- c0nsumer 12y agoI wonder how many of these I've caused by having Fiddler w/ HTTPS decryption enabled (to troubleshoot one session) while accessing FB or whatnot with the other.
- matthewarkin 12y agoI think some corporate firewalls might do some https decryption as well.