Re:Quickemu: Quickly create and run optimised Win-10,11/macO...
by e12e on Saturday October 09, 2021 @06:38PM
(#28813980)
> without some form of certificate pinning, could still be MITM'd
Now, apparently this uses plain http - but if tls/https is an option - any client (like curl/wget) should by definition come with a ssl trust root (os or bundled). If this is mitm'ed, you've got big problems. Certificate pinning doesn't really help that much in this case.
Now, apparently this uses plain http - but if tls/https is an option - any client (like curl/wget) should by definition come with a ssl trust root (os or bundled). If this is mitm'ed, you've got big problems. Certificate pinning doesn't really help that much in this case.