News for hackers. Stuff that matters.

A comment on Outlook is Microsoft's new data collection service. Parent comment

Re:Outlook is Microsoft's new data collection service by tmikaeld on Friday January 12, 2024 @01:09AM (#38964550)
The point here is that if you use someone else’s dns, they can redirect any domain to their server and sign the cert too since they also control the traffic.
[ Parent | on HN ]
Re:Outlook is Microsoft's new data collection service by syntheticcorp on Friday January 12, 2024 @12:41PM (#38971259)
You can’t serve a valid certificate chain to the client even if you control their traffic, because your malicious certificate isn’t signed by a trusted CA. And you can’t get a CA signature without demonstrating control of the domain to a CA.
[ Parent | on HN ]