News for hackers. Stuff that matters.

A comment on Kazakhstan to MitM all HTTPS traffic starting Jan 1. Parent comment

Re:Kazakhstan to MitM all HTTPS traffic starting Jan 1 by Elhana on Wednesday December 02, 2015 @02:02PM (#10665035)
You don't have to. Proxy handles the request and just gives response back to you signed with national cert. If you don't install it, your browser will just start complaining about every site. At least that is how Bluecoat ProxySG[1] works at my employee.

[1] https://bto.bluecoat.com/webguides/proxysg/security_first_st...

[ Parent | on HN ]
Re:Kazakhstan to MitM all HTTPS traffic starting Jan 1 by voltagex_ on Wednesday December 02, 2015 @05:16PM (#10666265)
Funny story, most of the machines / servers at my workplace weren't vulnerable to Heartbleed - but ProxySG was. AFAIK they built their own OS from scratch, too.
[ Parent | on HN ]