3 ms·
Web filters doing deep inspection on the HTTPS traffic should catch this I believe - using a fake cert to decrypt the HTTPS.
by noir-york 11y ago
Web filters doing deep inspection on the HTTPS traffic should catch this I believe - using a fake cert to decrypt the HTTPS.
- kevinherron 11y agoYou'd have to bypass a nasty warning from your browser before this could happen.
- detaro 11y agoNot on a company machine that has the root certificate installed, which is standard procedure if you deploy a system like that. A really good IDS might be able to catch tunneled traffic purely by looking at the traffic patterns, but I don't know how corkscrew works exactly and if such detection is possible without creating too many false alerts.