Re:An update on attempted man-in-the-middle attacks
by tlrobinson on Tuesday August 30, 2011 @02:41AM
(#2940398)
There's also the possibility that it does happen often and no one notices, of course.
[ Parent
| on HN ]
Re:An update on attempted man-in-the-middle attacks
by dredmorbius on Tuesday August 30, 2011 @10:51AM
(#2941679)
Makes me wonder how you'd approach the "how do I find bad certs" problem.
You'd think that an entity which, say, scrapes a large portion of the Web on a regular basis ... might be able to detect such things.
Meanwhile, there's CertWatch http://certwatch.simos.info/ and The Convergence Project http://convergence.io/