News for hackers. Stuff that matters.

A comment on Critical SSH Backdoor in multiple Barracuda Networks Products. Parent comment

Re:Critical SSH Backdoor in multiple Barracuda Networks Prod... by atamyrat on Thursday January 24, 2013 @02:31PM (#5111612)
> Remember most of these do intercept -- they have an SSL CA cert which is trusted by all your business client devices, to do MITM. So, if you pwn the box, you can pwn all the SSL traffic at the target company, too. It's an excellent place to attack.

I really hope this certificate is not installed/trusted by default on major browsers. Can somebody confirm it?

EDIT:

https://www.barracudanetworks.com/news/press_release/33

"Transparent deployment of this enhanced SSL Inspection feature requires deployment of a trusted root certificate on client Web browsers."

[ Parent | on HN ]
Re:Critical SSH Backdoor in multiple Barracuda Networks Prod... by lawnchair_larry on Thursday January 24, 2013 @02:37PM (#5111644)
No, the way these work is your IT deploys the internal CA cert as trusted on all systems in the enterprise.
[ Parent | on HN ]
Re:Critical SSH Backdoor in multiple Barracuda Networks Prod... by alistair77 on Thursday January 24, 2013 @04:00PM (#5112175)
I believe IE and Chrome use the operating systems list of certs. So your corporate IT dept can deploy the trusted certificates pretty easily. Firefox has it's own list of certificates so in theory is less susceptible to these corporate MITM attacks.
[ Parent | on HN ]