News for hackers. Stuff that matters.

A comment on PiHole-Google: Completely Block Google and Its Services. Parent comment

Re:PiHole-Google: Completely Block Google and Its Services by inetknght on Sunday June 30, 2019 @11:29AM (#20318703)
> You can create a self-signed certificate for Google domains and trust it on your machines. Then you can MITM.

Can you point to or write up a blog post with a proof of concept?

[ Parent | on HN ]
Re:PiHole-Google: Completely Block Google and Its Services by cpach on Monday July 01, 2019 @02:29AM (#20322918)
mkcert[1] is probably the easiest way to generate root certificate and leaf certificate(s). Then you can use a proxy like Squid to intercept the traffic[2]. You’d also need a local DNS server to point hosts like fonts.googleapis.com to your own web server.

https://github.com/FiloSottile/mkcert

https://turbofuture.com/internet/Intercepting-HTTPS-Traffic-...

[Edit: Now that I think of it, I’m not sure if Squid is really required...]

[ Parent | on HN ]