News for hackers. Stuff that matters.

A comment on Debian apt security update: man-in-the-middle arbitrary code execution. Parent comment

Re:Debian apt security update: man-in-the-middle arbitrary c... by ducktective on Wednesday November 04, 2026 @09:06AM (#50365697)
How to cache with HTTPS?
[ Parent | on HN ]
Re:Debian apt security update: man-in-the-middle arbitrary c... by iamnothere on Wednesday November 04, 2026 @09:09AM (#50365754)
SSL bumping
[ Parent | on HN ]
Re:Debian apt security update: man-in-the-middle arbitrary c... by Avamander on Wednesday November 04, 2026 @09:12AM (#50365794)
If your scale actually makes caching worth it you can run a local HTTPS mirror. If you don't control the endpoints to do that, you don't get to MiTM anything.
[ Parent | on HN ]
Re:Debian apt security update: man-in-the-middle arbitrary c... by sznio on Wednesday November 04, 2026 @09:15AM (#50365845)
give the cache server a certificate?
[ Parent | on HN ]
Re:Debian apt security update: man-in-the-middle arbitrary c... by cbluth on Wednesday November 04, 2026 @09:55AM (#50366401)
https://wiki.squid-cache.org/Features/SslPeekAndSplice
[ Parent | on HN ]