4 ms·
I've done some analysis on 360 secure browser's SSL handling in the past. I don't have my notes handy, but it can easily be taken advantage of by anyone, not ju
by ryan-c 12y ago
I've done some analysis on 360 secure browser's SSL handling in the past. I don't have my notes handy, but it can easily be taken advantage of by anyone, not just the Chinese government. I'm somewhat confused by this, as it would not be difficult to just bundle MitM CAs with this browser.
It's also not as popular as frequently reported. It is widely installed because many orgs are required to have the security software that bundles it, but when I was researching it the consensus I got from several Chinese people was that few people actually used it - "only old people who don't know computers use it".
- ximeng 12y agoInteresting, thanks. How can you measure the popularity? "Several" doesn't make much of a dent in the Chinese population.
- ryan-c 12y agoYes, that is true, it's a limited sample size, but it agrees with what I've seen from various sites that measure browser popularity. Having better numbers would be good.
- Quiark 12y agoI just downloaded 360 secure browser (into a VM, I'm not crazy :)) and checked. It does display a warning but still loads the website immediately. Also, I was unable to find a way to display the certificate.