3 ms·
The proxy can MITM the connection, as long as the browser accepts the proxy's certificate. Corporate environments tend to have their own CA infrastructure, so t
by creshal 12y ago
The proxy can MITM the connection, as long as the browser accepts the proxy's certificate. Corporate environments tend to have their own CA infrastructure, so this isn't much of a problem for them.
- rlpb 12y ago> Corporate environments tend to have their own CA infrastructure, so this isn't much of a problem for them. That's a very broad statement. Some corporate environments certainly do, and so this isn't much of a problem for them. But some corporate environments certainly do not, and so this is a problem for them. What you're essentially doing here is requiring that all corporate environments that don't currently have a CA infrastructure deploy one instead of using HTTP caching that works today. You're positively encouraging CA MITMing here.
- Dylan16807 12y ago>You're positively encouraging CA MITMing here. Internal to a business that is already MitMing everything, yes. Is that strange?