Re:CA Comodo used broken OCR and issued certificates to the ...
by function_seven on Friday October 21, 2016 @04:25PM
(#12764374)
The MitM is in the middle of something, no? You're "A", the site you intend to connect to is "Z", and the MitM is "M".
In this scenario, you're communicating with Z, while M listens in. Anything you send down the pipe can be transparently proxied by M and relayed to Z.
What mechanism can you use to verify the authenticity of the other end that can't be spoofed by M, now that they're inserted into the communication path?
In this scenario, you're communicating with Z, while M listens in. Anything you send down the pipe can be transparently proxied by M and relayed to Z.
What mechanism can you use to verify the authenticity of the other end that can't be spoofed by M, now that they're inserted into the communication path?