top | item 21391463

(no title)

awj | 6 years ago

> or (2) the user to install a certificate generated by the person doing the MITM

You mean like that "setup software" Comcast spent ages trying to pretend I had to install just to get things running?

I ran Linux in those days, which always meant a little extra support time but I never had to install jack.

discuss

jimktrains2|6 years ago

That's quite possible, but many apps and browsers pin certificates and this would probably be reported quickly?

judge2020|6 years ago

https://chromium.googlesource.com/chromium/src/+/master/docs...

> Chrome does not perform pin validation when the certificate chain chains up to a private trust anchor. A key result of this policy is that private trust anchors can be used to proxy (or MITM) connections, even to pinned sites.