Re:Apple's apps bypass firewalls like LittleSnitch and LuLu ...
by Godel_unicode on Tuesday October 20, 2020 @07:17PM
(#24843279)
Absolutely not, installing a CA makes attacks which weren't previously possible now possible. A host firewall isn't doing anything a network provider (read: your ISP, coffee shop, vpn provider, etc) couldn't already do. At least you can possibly look at what the host firewall is doing.
[ Parent
| on HN ]
Re:Apple's apps bypass firewalls like LittleSnitch and LuLu ...
by jachee on Tuesday October 20, 2020 @10:50PM
(#24844333)
Installing any third-party software that inspects network traffic makes attacks which weren't previously possible now possible, since that software can be targeted.
Re:Apple's apps bypass firewalls like LittleSnitch and LuLu ...
by silentOpen on Wednesday October 21, 2020 @03:10AM
(#24845436)
It depends on the host firewall... many quality operating systems allow host firewalls to apply process-based policy which your upstream certainly can’t achieve.