Re:LeakyX, a vulnerability that Apple and Microsoft have kno...
by dogma1138 on Saturday September 23, 2017 @06:02PM
(#15322012)
Read it again, the SSL is validated normally.
What isn't "validated" is the fact that there is a real exchange server beyond the HTTP/HTTPS endpoint.
You can do a layer 7 validation and validate that there is an actual exchange server beyond the HTTP endpoint but as I stated it's utterly useless since if you can MitM the SSL connection answer "yes I'm a real exchange server" won't be a technical problem at that point.
The author basically sees something that isn't there, the mail app tries to connect to an exchange server, it does so over SSL, it does validates the SSL certificate or prompts the user to approve it if the chain cannot be validates, it does however sends your credentials in the request to the server like it should.
What isn't "validated" is the fact that there is a real exchange server beyond the HTTP/HTTPS endpoint.
You can do a layer 7 validation and validate that there is an actual exchange server beyond the HTTP endpoint but as I stated it's utterly useless since if you can MitM the SSL connection answer "yes I'm a real exchange server" won't be a technical problem at that point.
The author basically sees something that isn't there, the mail app tries to connect to an exchange server, it does so over SSL, it does validates the SSL certificate or prompts the user to approve it if the chain cannot be validates, it does however sends your credentials in the request to the server like it should.