> the compromised router isn't a usefully privileged position to launch this attack from. I hadn't thought too deeply about it but you're absolutely right. Gi

> the compromised router isn't a usefully privileged position to launch this attack from. I hadn't thought too deeply about it but you're absolutely right. Given the presence of encryption, the biggest advantage you can get from owning the router is being able to phish the user from a site they might normally trust but isn't encrypted (a group of sites that is, thankfully, getting smaller every day).