3 ms·
Why wouldn't SSL help? Unless the offending exit node has the requested site's cert, there's almost no way they can carry out a MITM attack on an SSL request un
by andrewksl 12y ago
Why wouldn't SSL help? Unless the offending exit node has the requested site's cert, there's almost no way they can carry out a MITM attack on an SSL request undetected. That's kind of the whole point of certs.
Or is this an indictment of Cloudfront offering to be your SSL termination point?
- Animats 12y agoThis is an indictment of Cloudfront offering to be your SSL termination point, and using multiple-domain certs to do it. Here's the Black Hat paper on how to exploit that. https://bh.ht.vc/vhost_confusion.pdf https://bh.ht.vc/vhost_confusion.pdf