UK Network Operators Target iCloud Private Relay in Complaint to Regulator

Re:UK Network Operators Target iCloud Private Relay in Compl... by aisio on Sunday March 13, 2022 @08:29PM (#30667213)

MITM for TLSv1.3 is possible. Plenty of solutions available for enterprises to do this. The MITM occurs still happens for TLSv1.3 on key exchange, allowing for the subsequent certificate to also be MITM and be replaced and encrypted. The only real affect TLSv1.3 has for MITM is that company policies for decryption can't match on the cert to determine if decrypt should occur, but they can still use the SNI which is plaintext

[ Parent | on HN ]

Re:UK Network Operators Target iCloud Private Relay in Compl... by dcow on Tuesday March 15, 2022 @01:08AM (#30681866)

I thought combined with encrypted SNI this was no longer possible since the middleware doesn't have access to that information.

[ Parent | on HN ]