News for hackers. Stuff that matters.

A comment on MITM on HTTPS traffic in Kazakhstan. Parent comment

Re:MITM on HTTPS traffic in Kazakhstan by mdhardeman on Thursday July 18, 2019 @06:55PM (#20474753)
Except they are a new problem when the use of them is mandated by a nation-state.
[ Parent | on HN ]
Re:MITM on HTTPS traffic in Kazakhstan by bcoates on Thursday July 18, 2019 @07:25PM (#20474962)
Which is bad news for the ~15m internet users in Kazakhstan. For the ~4000m internet users not in Kazakhstan & generally immune to their rubber hose attack, protecting them from being one BGP fuckup away from being MITMed by a hostile foreign power is much more important.
[ Parent | on HN ]
Re:MITM on HTTPS traffic in Kazakhstan by mdhardeman on Thursday July 18, 2019 @07:45PM (#20475066)
Totally separate problem that I agree needs to be fixed.

In reality, being one BGP trick away from a mere dedicated individual or corporate owning certs for your domain is an actual risk today.

[ Parent | on HN ]