Re:When did POP and IMAP become a “legacy protocol?”
by cortesoft on Sunday September 25, 2022 @08:07PM
(#32977835)
Scenario A is impossible and has been impossible for as long as https has been a thing.
The only way it would be possible is if you installed a root cert from your ISP onto your computer so that it would trust a cert issued by them. Otherwise, they would not have a valid cert for example.com and you would be presented with a cert error.
This is literally the exact thing https was designed to prevent. It is and always has been impossible (again, unless the client machine is administered by the ISP or whoever the middleman is, and they can install a cert on the machine)
Re:When did POP and IMAP become a “legacy protocol?”
by GoblinSlayer on Monday September 26, 2022 @12:41PM
(#32985272)
It's possible if the connection goes through an http proxy.
Scenario a:
1. Navigate to https://www.example.com
2. Arrive at https://www.completelyunrelated-adsite.com while your address bar reads https://www.example.com
They used to do this regardless of your DNS. They directly hijacked that stream/connection.
Scenario b:
1. Navigate to https://www.example.com
2. Get https://www.example.com with an ad-banner on top.
They happened rarely, and never survived a reload or further navigation. They completely stopped after a while.
I have a 4G modem from my mobile carrier. They inject a info popup when I receive an SMS or any other notification' if they can manage it. It's very rare now, too.