Tailscale Has Partnered with Mullvad

Re:Tailscale Has Partnered with Mullvad by cdchn on Friday September 08, 2023 @12:52AM (#37429482)

>Someone could easily run the same kind of thing on the internet, providing free proxy service and telling their users to trust a certificate signed by them, without properly explaining the consequences of that.

Somebody already did do this, except as a paid service, and had their special 'client' simulate user clicks to install the self-signed root CA cert in your OS' cert store for you.

[ Parent | on HN ]

Re:Tailscale Has Partnered with Mullvad by SOLAR_FIELDS on Friday September 08, 2023 @02:12AM (#37430040)

Interesting, it would have to be a pretty invasive client to do that. Usually installing a cert is accompanied by a lot of very loud warnings on modern OSes. So the end user would have to first give this software the permission to click around on their desktop for them without fully understanding the implications. Which does seem plausible

[ Parent | on HN ]

Re:Tailscale Has Partnered with Mullvad by cdchn on Friday September 08, 2023 @08:42AM (#37432765)

OSes weren't always so modern.

[ Parent | on HN ]

Re:Tailscale Has Partnered with Mullvad by codetrotter on Friday September 08, 2023 @03:05PM (#37437954)

Adding trusted certificates in Firefox directly, instead of at the OS level, is very straightforward. Requires few clicks and does not shout too much.

I prefer using Firefox on my laptop so I didn’t check to see what the process is like for Chrome-based browsers to add trusted certificates (or if Chrome-based browsers only use OS-level certs).

But at least with Firefox, the user doesn’t have to go fiddling with OS level stuff.

[ Parent | on HN ]