Re:Xfinity Is Man-in-the-Middle Attacking My Internet
by jimktrains2 on Tuesday October 29, 2019 @05:29PM
(#21392266)
I was going off remembering this.
> Late on December 24, Chrome detected and blocked an unauthorized digital certificate for the "*.google.com" domain.
https://security.googleblog.com/2013/01/enhancing-digital-ce...
Re:Xfinity Is Man-in-the-Middle Attacking My Internet
by LocalPCGuy on Tuesday October 29, 2019 @06:30PM
(#21392804)
Pretty sure chrome has it's own code to detect Google certs and report invalid ones back to Google.
> Chrome does not perform pin validation when the certificate chain chains up to a private trust anchor. A key result of this policy is that private trust anchors can be used to proxy (or MITM) connections, even to pinned sites.