News for hackers. Stuff that matters.

A comment on China Telecom's Internet Traffic Misdirection. Parent comment

Re:China Telecom's Internet Traffic Misdirection by resters on Monday November 05, 2018 @10:16PM (#18388044)
Great point. Ideally it would also be possible to track which certificate was used last time and if the certificate has changed, verify somehow whether the change was intentional.
[ Parent | on HN ]
Re:China Telecom's Internet Traffic Misdirection by predakanga on Tuesday November 06, 2018 @12:56AM (#18388741)
This did exist in the form of HTTP Public Key Pinning (now deprecated).

Unfortunately, the mechanism which replaced it (Expect-CT) can only help after the fact - someone would have to notice the extra issuance, and you would have no idea whether your traffic was affected.

[ Parent | on HN ]