top | item 13326628

(no title)

jp3141 | 9 years ago

How do you redirect to the phishing site, if you are currently browsing an SSL encrypted website without making it to obvious? Since you get an error message in the browser...

discuss

order

edeirme|9 years ago

That is correct. However it's trivial for a MiTM attacker to perform an SSL stripping attacks when the victim is communicating with sites that support plain HTTP.

jp3141|9 years ago

even with HSTS?