11 ms·
Actually it is worse than Superfish. It does TLS MitM, but it doesn't do any verification at all. It just accepts every self-signed cert and replaces it with a
by hannob 12y ago
Actually it is worse than Superfish.
It does TLS MitM, but it doesn't do any verification at all. It just accepts every self-signed cert and replaces it with a cert signed by it's locally installed root cert.
So it completely disables HTTPS protection. Everyone who has this: get rid of it, this is super-dangerous.