Xfinity Is Man-in-the-Middle Attacking My Internet

Re:Xfinity Is Man-in-the-Middle Attacking My Internet by awj on Tuesday October 29, 2019 @04:12PM (#21391463)

> or (2) the user to install a certificate generated by the person doing the MITM

You mean like that "setup software" Comcast spent ages trying to pretend I had to install just to get things running?

I ran Linux in those days, which always meant a little extra support time but I never had to install jack.

[ Parent | on HN ]

Re:Xfinity Is Man-in-the-Middle Attacking My Internet by jimktrains2 on Tuesday October 29, 2019 @04:33PM (#21391670)

That's quite possible, but many apps and browsers pin certificates and this would probably be reported quickly?

[ Parent | on HN ]

Re:Xfinity Is Man-in-the-Middle Attacking My Internet by judge2020 on Tuesday October 29, 2019 @04:53PM (#21391886)

https://chromium.googlesource.com/chromium/src/+/master/docs...

> Chrome does not perform pin validation when the certificate chain chains up to a private trust anchor. A key result of this policy is that private trust anchors can be used to proxy (or MITM) connections, even to pinned sites.

[ Parent | on HN ]

Re:Xfinity Is Man-in-the-Middle Attacking My Internet by jimktrains2 on Tuesday October 29, 2019 @05:29PM (#21392266)

I was going off remembering this.

> Late on December 24, Chrome detected and blocked an unauthorized digital certificate for the "*.google.com" domain.

https://security.googleblog.com/2013/01/enhancing-digital-ce...

[ Parent | on HN ]

Re:Xfinity Is Man-in-the-Middle Attacking My Internet by LocalPCGuy on Tuesday October 29, 2019 @06:30PM (#21392804)

Pretty sure chrome has it's own code to detect Google certs and report invalid ones back to Google.

[ Parent | on HN ]