News for hackers. Stuff that matters.

A comment on Kazakhstan to MitM all HTTPS traffic starting Jan 1. Parent comment

Re:Kazakhstan to MitM all HTTPS traffic starting Jan 1 by therein on Wednesday December 02, 2015 @10:31PM (#10667569)
Was the large Chinese site serving traffic over HTTPS?
[ Parent | on HN ]
Re:Kazakhstan to MitM all HTTPS traffic starting Jan 1 by dujiulun2006 on Thursday December 03, 2015 @01:50AM (#10668167)
Sadly, they (Baidu) are not, which is why the script content was easily modified.

To clear it up, I said that GFW "can" do (but has not yet done) these. But it tried to MITM some https traffic earlier with a non-trusted certificate as an experiment.

[ Parent | on HN ]
Re:Kazakhstan to MitM all HTTPS traffic starting Jan 1 by dujiulun2006 on Thursday December 03, 2015 @02:16AM (#10668265)
@andreyf: More like a social experiment. See whether people would notice (we did) and what's their reaction.
[ Parent | on HN ]
Re:Kazakhstan to MitM all HTTPS traffic starting Jan 1 by andreyf on Thursday December 03, 2015 @02:06AM (#10668226)
Experiment? This isn't science. They can ask any engineer what MITM with a non-trusted cert would do, and that's nothing.
[ Parent | on HN ]