The modern HTTPS world has no place for old web servers

Re:The modern HTTPS world has no place for old web servers by skrebbel on Wednesday May 13, 2020 @10:46AM (#23167371)

I don't understand, anyone who can MITM can also sniff, right?

[ Parent | on HN ]

Re:The modern HTTPS world has no place for old web servers by kop316 on Wednesday May 13, 2020 @10:53AM (#23167447)

Yes they can. They simply decrypt, and reencrypt with their own self signed cert. If you have no way to verify the self-signed cert, you would never know.

[ Parent | on HN ]

Re:The modern HTTPS world has no place for old web servers by naniwaduni on Thursday May 14, 2020 @08:09AM (#23178493)

An adversary with MitM capability needs to commit to being detectable in order to read encrypted traffic.

[ Parent | on HN ]

Re:The modern HTTPS world has no place for old web servers by dtech on Saturday May 16, 2020 @07:27AM (#23202557)

but not everyone who can sniff can MITM, encryption always prevents sniffing

[ Parent | on HN ]