Re:Extended Validation Certificates Are Really Dead
by wolf550e on Monday August 12, 2019 @03:48PM
(#20679213)
TLS only says you're having a private conversation with a server, not how trustworthy it is. Maybe you're having a private conversation with the devil!
TLS protects you from active attacker at your internet cafe wifi or small ISP or not-tier1 country's ministry of propaganda.
If the network between multiple aws/gcp/azure regions where e.g. let's encrypt's acme servers are deployed and the server you're talking to is hijacked, TLS doesn't help because hijacker can get valid certificate.
TLS protects you from active attacker at your internet cafe wifi or small ISP or not-tier1 country's ministry of propaganda.
If the network between multiple aws/gcp/azure regions where e.g. let's encrypt's acme servers are deployed and the server you're talking to is hijacked, TLS doesn't help because hijacker can get valid certificate.