News for hackers. Stuff that matters.

A comment on Gmail.com being MITM'd by Iran using this certificate.

Re:Gmail.com being MITM'd by Iran using this certificate by packetlss on Monday August 29, 2011 @03:57PM (#2938623)
In order to mitigate attacks like this Firefox users can use: http://convergence.io/
[ Parent | on HN ]
Re:Gmail.com being MITM'd by Iran using this certificate by windexh8er on Monday August 29, 2011 @04:35PM (#2938829)
There's also another, similar, project called Perspectives: http://perspectives-project.org/

The Syrian government was doing this recently as well: https://www.eff.org/deeplinks/2011/05/syrian-man-middle-agai...

Oh and don't forget about the EFF's SSL Observatory: https://www.eff.org/observatory

[ Parent | on HN ]
Re:Gmail.com being MITM'd by Iran using this certificate by J_Dalton on Tuesday August 30, 2011 @05:11AM (#2940662)
How easy is it to MITM the convergence requests themselves? And does it send all of my web-browsing habits to the notaries? How much money would I have to pay for someone to run a notary for me and would that be safe?
[ Parent | on HN ]
Re:Gmail.com being MITM'd by Iran using this certificate by orillian on Monday August 29, 2011 @04:19PM (#2938735)
convergence is not compatable with FF 6.0 btw. You'll need to manually check if your using 6.0.

O.

[ Parent | on HN ]
Re:Gmail.com being MITM'd by Iran using this certificate by sp332 on Monday August 29, 2011 @04:16PM (#2938718)
Interesting, but how do you use it?
[ Parent | on HN ]