3 ms·
But what if you get a reply "I am example.com, here's the encrypted socket". How do you know that the entity that replied isn't in fact something that is MiTM y
by lokedhs 12y ago
But what if you get a reply "I am example.com, here's the encrypted socket". How do you know that the entity that replied isn't in fact something that is MiTM you connection?
- nothrabannosir 12y agoSame as now. What is inherently anti-OS the way we use certificates? In fact, most apps already use OS-wide root ca lists.
- omphalos 12y ago> Same as now. Along similar lines, I think it's strange that I now see warnings in Chrome for SHA-1 certificates but no warnings at all for http.
- leni536 12y agoAnd firefox happily offers to save your password when you enter it into a http login window but yells at you if you try to connect to a self signed https webpage.