News for hackers. Stuff that matters.

A comment on ReCon analyzes network traffic to tell if personal info is being transmitted. Parent comment

Re:ReCon analyzes network traffic to tell if personal info i... by bhhaskin on Wednesday May 31, 2017 @01:47PM (#14454463)
They could require a root ssl cert to be installed and then just MITM all the traffic. And Org that wants to protect personal data might be willing to do something stupid like that.
[ Parent | on HN ]
Re:ReCon analyzes network traffic to tell if personal info i... by revelation on Wednesday May 31, 2017 @04:00PM (#14455448)
For a properly engineered mobile app there are only downsides to using the public CA system (and thereby the devices CA store). So that would not work.
[ Parent | on HN ]
Re:ReCon analyzes network traffic to tell if personal info i... by equalunique on Wednesday May 31, 2017 @01:59PM (#14454564)
True. This is not hard to deploy if they leverage a centralized management solution for PKI, such as MS Active Directory.
[ Parent | on HN ]