3 ms·
> It's the golden unsolved, perhaps unsolvable problem in crypto. Sorry, perhaps my question wasn't clear. I wasn't asking about MITM in the general case, I wa
by mjs 12y ago
> It's the golden unsolved, perhaps unsolvable problem in crypto.
Sorry, perhaps my question wasn't clear. I wasn't asking about MITM in the general case, I was asking about this particular case. The certificate chain for Hacker News seems to go AddTrust -> COMODO -> Another COMODO -> *.ycombinator.com. So in this case, if you're MITM'd by MCS Holdings, is MCS Holdings going to be part of the chain (after a CNNIC)?
- iancarroll 12y agoYes, the chain would be different. MCS Holding cannot become Comodo (Comodo = AddTrust, btw), so the chain would change to CNNIC -> MCS Holdings -> *.ycombinator.com.