News for hackers. Stuff that matters.
Re: SSL is not about encryption by zaptheimpaler on Sunday August 05, 2012 @01:52AM (#4340741)
If the server redirects from HTTP to HTTPS, how is it possible to stop it?
Re: SSL is not about encryption by BaseBand on Sunday August 05, 2012 @02:01AM (#4340757)
MITM attack. If your on the same networking and the router isn't configured to block ARPing. You can proxy the traffic that filters out the redirect. Your proxy keeps the https connection open and passes back unsecured content. Public wifi can be a bad idea sometimes...