News for hackers. Stuff that matters.
Re:Stop the proposal on mass surveillance of the EU by kragen on Thursday February 02, 2023 @12:50PM (#34630353)
if i type https://gmail.com/ into my browser, it usually doesn't matter if you have successfully gotten comodo or actalis to issue you a fake certificate for gmail.com, because my browser doesn't try to connect to your malicious server; it tries to connect to google's actual gmail server, and so you don't receive my packets, and your fake certificate does you no good

but, as i said, if you can feed me fake dns results so i connect to the wrong ip, or if you can arrange so that packets to gmail's legitimate ip go to your server instead (for example by having me connect to your wifi), then you can leverage the fake certificate into a successful mitm attack

but your explanation of the part of the basics of tls you understand, incomplete though it is, is irrelevant to the attack i was actually discussing, where someone doesn't like what you're saying (or the communication service you're providing) and gets your cert revoked to shut you up

Re:Stop the proposal on mass surveillance of the EU by bbarnett on Thursday February 02, 2023 @10:00PM (#34636606)
because my browser doesn't try to connect to your malicious server

Unless a router is compromised along the route, which is a known thing, and part of why we use ssl everywhere now.

Re:Stop the proposal on mass surveillance of the EU by kragen on Friday February 03, 2023 @08:03AM (#34640493)
the paragraph immediately following the one you quoted from explains that, and did so nine hours before your comment

the grandparent comment https://news.ycombinator.com/item?id=34629050 also describes some more common ways that this can happen without routers being compromised

Re:Stop the proposal on mass surveillance of the EU by bbarnett on Friday February 03, 2023 @10:27AM (#34642290)
Noted.