Re:When did POP and IMAP become a “legacy protocol?”
by nulbyte on Sunday September 25, 2022 @07:23PM
(#32977509)
Unless the ISP forces the use of its own Certificate Authority on its users, this isn't possible. TLS and the infrastructure surrounding it were designed with integrity of the connection in mind. Knowing this, I would be very curious to know what specifically you encountered and where. I see you added some details elsewhere, but it still doesn't jive with how TLS works.
[ Parent
| on HN ]
Re:When did POP and IMAP become a “legacy protocol?”
by bayindirh on Sunday September 25, 2022 @07:26PM
(#32977536)
Our ISP doesn't force MITM certificates, but used to try to mess with the retrieved pages sporadically with stream-hijacks (you navigate to HN, and got greeted with a full page ad) or banner insertions, forcing connection to mixed status while keeping the inner frame HTTPS.
They're not doing this anymore, because I guess they now know how to use their DPI infra in useful ways to them.
My mobile carrier still injects stuff to HTTP pages, but doesn't mess with HTTPS ones, at least yet.