News for hackers. Stuff that matters.

A comment on TLS 1.3 and Proxies. Parent comment

Re:TLS 1.3 and Proxies by blattimwind on Sunday March 11, 2018 @07:20PM (#16565257)
Active MITM remains able to sniff certificates, because the certificate is exchanged (indeed, must be exchanged) before you can authenticate the key exchange and thus lock out AMITM attackers.
[ Parent | on HN ]
Re:TLS 1.3 and Proxies by vbezhenar on Sunday March 11, 2018 @07:42PM (#16565337)
Is it possible to launch active MITM attack and then establish connection like it wasn't there? The point of sniffing certificate is to block access for some websites and allow for others, located on the same IP address. Otherwise you could just block IP.
[ Parent | on HN ]