News for hackers. Stuff that matters.

A comment on Ask HN: Options when corp IT installs their own root certs for https sniffing?. Parent comment

Re:Ask HN: Options when corp IT installs their own root cert... by jimmysdown on Monday February 08, 2016 @10:49AM (#11058724)
>Would it make a difference knowing the product behind the sniffing?

My main concern is a Superfish-like situation where a user takes their laptop outside the corp LAN and gets owned because the root cert is vulnerable. Knowing the vendor of the whole system might be enlightening; I'm not sure.

[ Parent | on HN ]
Re:Ask HN: Options when corp IT installs their own root cert... by NetStrikeForce on Monday February 08, 2016 @11:37AM (#11059081)
Fair point. Usually this cert will be generated internally, even by the device itself, but it's a good point then to know who's the vendor, in case these certs are "pre-generated" with the same private key for everyone or something :)
[ Parent | on HN ]