News for hackers. Stuff that matters.

A comment on Leaving Apple and Google: more devices now supported. Parent comment

Re:Leaving Apple and Google: more devices now supported by jakobegger on Sunday November 25, 2018 @03:51AM (#18526043)
With ubiquitous use of TLS and the advent of certificate pinning Wireshark is becoming less and less useful. Even if you convince the phone to accept your man-in-the-middle certificate with a provisioning profile, there's no way to proof that it sends the same data as if it got the real certificate.
[ Parent | on HN ]
Re:Leaving Apple and Google: more devices now supported by Wowfunhappy on Monday November 26, 2018 @04:26PM (#18536936)
If iOS was changing the data it sent out depending on which root certificates were installed, that would be a huge scandal, as I cannot imagine _any_ non-malicious reason to do that.

That's not proof of anything, but again, at some point I feel you have to assume good faith. Apple does not have a history of doing stuff like this.

[ Parent | on HN ]
Re:Leaving Apple and Google: more devices now supported by dcbadacd on Monday November 26, 2018 @09:30PM (#18538828)
Exactly, you're assuming good faith. Instead it should be proven good faith.
[ Parent | on HN ]