News for hackers. Stuff that matters.

A comment on Customer Service Agents Can See What You're Typing in Real Time. Parent comment

Re:Customer Service Agents Can See What You're Typing in Rea... by jacurtis on Wednesday January 23, 2019 @05:14PM (#18983674)
Well you aren't wrong. I mean technically speaking if there is an SSL certificate, than in fact you are directly connected to the server and no one is in between.

The difference is that if I own the server, I can see your information even though it was a direct server connection. You directly fed the information to me. That is what is happening in these scenerios.

[ Parent | on HN ]
Re:Customer Service Agents Can See What You're Typing in Rea... by bradknowles on Wednesday January 23, 2019 @06:11PM (#18984178)
Nah, there are hundreds of CAs out there. People could get their SSL certs from any one of them and MITM all your supposedly secure web traffic.

And plenty of ISPs will do exactly that, if you give them half a chance.

[ Parent | on HN ]