News for hackers. Stuff that matters.

A comment on EFF to Verizon: Etisalat Certificate Authority Threatens Web Security.

Re:EFF to Verizon: Etisalat Certificate Authority Threatens ... by staktrace on Friday August 13, 2010 @10:00PM (#1602783)
Interesting. I'm going to be traveling to the UAE soon. If I assume that Etilsalat has in fact issued itself HTTPS certs for secure sites that I visit, and is doing some sort of MITM attack, is there any way for me to detect and/or prevent it?
[ Parent | on HN ]
Re:EFF to Verizon: Etisalat Certificate Authority Threatens ... by tptacek on Friday August 13, 2010 @10:02PM (#1602788)
Yes, mostly; you can always click the "lock" icon in your browser. You shouldn't see an Etisalat/Comtrust certificate anywhere for the sites you normally use. This is probably not bulletproof, but, probably, neither are Etisalat's snooping tools.
[ Parent | on HN ]
Re:EFF to Verizon: Etisalat Certificate Authority Threatens ... by jberryman on Saturday August 14, 2010 @04:44PM (#1603996)
Not to go all cypherpunk, but you can pretty easily create an encrypted SOCKS proxy tunnel using an OpenSSH client. So if you have an SSH server in a country you trust, you can tunnel your browser traffic through there for connections you are nervous about.

first link from google:

http://embraceubuntu.com/2006/12/08/ssh-tunnel-socks-proxy-f...

EDIT: clarity

[ Parent | on HN ]