3 ms·
The proxy accepts fake certificates so you can MiTM anyone. It does not properly verify the remote site's certificate.
by MichaelGG 12y ago
The proxy accepts fake certificates so you can MiTM anyone. It does not properly verify the remote site's certificate.
- halayli 12y agoYes, but MiTM isn't the same as sniffing packets over a wifi in a cafe, which what Graham claimed.
- MichaelGG 12y agoIf you can read (sniff) WiFi in a cafe, you can write (MiTM), so the difference isn't really important, is it?
- halayli 12y agoUsually sniffing refers to capturing packets. But yes if you can read and write then you can definitely decrypt the traffic since you can provide the user with a trusted cert.