4 ms·
... And now they also need to circumvent Googles cert-pinning and other attempts to twart even legally mandated MiTM proxies... Either all MiTM needs to be out
by phkamp 11y ago
... And now they also need to circumvent Googles cert-pinning and other attempts to twart even legally mandated MiTM proxies...
Either all MiTM needs to be outlawed (with actual laws) or protocols need to recognize that laws mandate MiTM some places, and accommodate that with minimal loss of security and privacy.
The current weapons race just makes things more and more broken.
- rdl 11y agoLocal CAs are allowed to override even cert-pinning for this reason.
- phkamp 11y agoRight, so when you're guest at a company you have to install their CERT on your device to use their guest-wlan ? If you're an employee you have to put the company CERT on your smartphone ? How does that improve your security ?
- snowwrestler 11y agoGuests shouldn't be on the corporate network anyway. Either companies will provide a guest WiFi signal that is physically separate from the corporate network (that's what my employer does), or they will ask guests to provide their own connectivity via LTE.