News for hackers. Stuff that matters.

A comment on Edge sends full URLs of pages visited to Microsoft. Parent comment

Re:Edge sends full URLs of pages visited to Microsoft by auslander on Sunday July 21, 2019 @11:28AM (#20491731)
It is not so easy to do this MITM trick with Chrome, it has Google certs pinned down.

"For the transparent proxy to work, it needs .google.com to be added to the URL whitelist to allow all traffic to .google.com. This configuration is not supported because of Chrome security features that are in place, and we recommend that you avoid the use of transparent proxies." https://support.google.com/chrome/a/answer/3504942?hl=en

[ Parent | on HN ]
Re:Edge sends full URLs of pages visited to Microsoft by occamrazor on Sunday July 21, 2019 @12:05PM (#20491953)
This link refers to Chrome devises, like Chromebooks, not to the Chrome browser.
[ Parent | on HN ]
Re:Edge sends full URLs of pages visited to Microsoft by auslander on Sunday July 21, 2019 @01:09PM (#20492335)
You'll be getting "ERR_SSL_PROTOCOL_ERROR". I could not find any posts on internet that were able to MITM and analyse Chrome to google.com traffic.
[ Parent | on HN ]