News for hackers. Stuff that matters.

A comment on MITM on HTTPS traffic in Kazakhstan. Parent comment

Re:MITM on HTTPS traffic in Kazakhstan by Avamander on Thursday July 18, 2019 @03:51PM (#20473323)
Not when the cert has been previously CT and Staple preloaded I suspect?
[ Parent | on HN ]
Re:MITM on HTTPS traffic in Kazakhstan by michaelt on Friday July 19, 2019 @08:53AM (#20478202)
If a user manually imports a CA, it bypasses protections like CT [1]. This is a feature specifically designed to allow MITM for corporate proxies.

Always seemed like a misfeature to me, but all the browsers do it.

[1] https://chromium.googlesource.com/chromium/src/+/master/net/...

[ Parent | on HN ]
Re:MITM on HTTPS traffic in Kazakhstan by Avamander on Saturday July 20, 2019 @12:12PM (#20486572)
Sounds ridiculous that even when a site host specifically says they want things Stapled and CTd are ignored like that.
[ Parent | on HN ]